SpotBugs Bug Detector Report

The following document contains the results of SpotBugs

SpotBugs Version is 4.8.3

Threshold is low

Effort is max

Summary

Classes Bugs Errors Missing Classes
29 25 0 6

Files

Class Bugs
com.app.controller.AuthController 3
com.app.controller.FileController 4
com.app.controller.HelloController 1
com.app.controller.MessageController 5
com.app.controller.ProductController 7
com.app.model.FileMetadata 2
com.app.security.SecurityConfig 1
com.app.service.FileStorageService 1
com.app.service.UserService 1

com.app.controller.AuthController

Bug Category Details Line Priority
com.app.controller.AuthController is a Spring endpoint (Controller) SECURITY SPRING_ENDPOINT 47 Low
com.app.controller.AuthController is a Spring endpoint (Controller) SECURITY SPRING_ENDPOINT 67 Low
com.app.controller.AuthController is a Spring endpoint (Controller) SECURITY SPRING_ENDPOINT 38 Low

com.app.controller.FileController

Bug Category Details Line Priority
new com.app.controller.FileController(FileStorageService) may expose internal representation by storing an externally mutable object into FileController.fileStorageService MALICIOUS_CODE EI_EXPOSE_REP2 21 Medium
com.app.controller.FileController is a Spring endpoint (Controller) SECURITY SPRING_ENDPOINT 45 Low
com.app.controller.FileController is a Spring endpoint (Controller) SECURITY SPRING_ENDPOINT 33 Low
com.app.controller.FileController is a Spring endpoint (Controller) SECURITY SPRING_ENDPOINT 27 Low

com.app.controller.HelloController

Bug Category Details Line Priority
com.app.controller.HelloController is a Spring endpoint (Controller) SECURITY SPRING_ENDPOINT 11 Low

com.app.controller.MessageController

Bug Category Details Line Priority
new com.app.controller.MessageController(MessageService) may expose internal representation by storing an externally mutable object into MessageController.messageService MALICIOUS_CODE EI_EXPOSE_REP2 19 Medium
com.app.controller.MessageController is a Spring endpoint (Controller) SECURITY SPRING_ENDPOINT 34 Low
com.app.controller.MessageController is a Spring endpoint (Controller) SECURITY SPRING_ENDPOINT 40 Low
com.app.controller.MessageController is a Spring endpoint (Controller) SECURITY SPRING_ENDPOINT 24 Low
com.app.controller.MessageController is a Spring endpoint (Controller) SECURITY SPRING_ENDPOINT 29 Low

com.app.controller.ProductController

Bug Category Details Line Priority
new com.app.controller.ProductController(ProductService) may expose internal representation by storing an externally mutable object into ProductController.productService MALICIOUS_CODE EI_EXPOSE_REP2 21 Medium
com.app.controller.ProductController is a Spring endpoint (Controller) SECURITY SPRING_ENDPOINT 36 Low
com.app.controller.ProductController is a Spring endpoint (Controller) SECURITY SPRING_ENDPOINT 47 Low
com.app.controller.ProductController is a Spring endpoint (Controller) SECURITY SPRING_ENDPOINT 26 Low
com.app.controller.ProductController is a Spring endpoint (Controller) SECURITY SPRING_ENDPOINT 31 Low
com.app.controller.ProductController is a Spring endpoint (Controller) SECURITY SPRING_ENDPOINT 56 Low
com.app.controller.ProductController is a Spring endpoint (Controller) SECURITY SPRING_ENDPOINT 42 Low

com.app.model.FileMetadata

Bug Category Details Line Priority
com.app.model.FileMetadata.getProduct() may expose internal representation by returning FileMetadata.product MALICIOUS_CODE EI_EXPOSE_REP 54 Medium
com.app.model.FileMetadata.setProduct(Product) may expose internal representation by storing an externally mutable object into FileMetadata.product MALICIOUS_CODE EI_EXPOSE_REP2 55 Medium

com.app.security.SecurityConfig

Bug Category Details Line Priority
Disabling Spring Security's CSRF protection is unsafe for standard web applications SECURITY SPRING_CSRF_PROTECTION_DISABLED 40 High

com.app.service.FileStorageService

Bug Category Details Line Priority
This API (java/nio/file/Paths.get(Ljava/lang/String;[Ljava/lang/String;)Ljava/nio/file/Path;) reads a file whose location might be specified by user input SECURITY PATH_TRAVERSAL_IN 43 Medium

com.app.service.UserService

Bug Category Details Line Priority
Improper handling of Unicode transformations such as case mapping and normalization. SECURITY IMPROPER_UNICODE 35 Low