WebGoat/WebGoat-Legacy

Issues

• Download link in the easy install read the docs page contains dead link

  #112 opened 7 months ago by liaisb
  0

• Welcome Page Login Failure

  #47 opened 9 years ago by muzir
  5

• DepShield Deprecation Notice

  #107 opened 2 years ago by sonatype-depshield
  0

• i cannot webgoat server

  #87 opened 4 years ago by loganstark0101
  1

• [DepShield] Usage of commons-fileupload:commons-fileupload:1.2.2 results in vulnerability to [CVE-2014-0050] Permissions, Privileges, and Access Controls

  #65 opened 6 years ago by sonatype-depshield
  1

• [DepShield] Usage of commons-fileupload:commons-fileupload:1.2.2 results in vulnerability to [CVE-2016-3092] Improper Input Validation

  #63 opened 6 years ago by sonatype-depshield
  1

• [DepShield] Usage of commons-fileupload:commons-fileupload:1.2.2 results in vulnerability to [CVE-2016-1000031] Improper Access Control

  #64 opened 6 years ago by sonatype-depshield
  1

• [DepShield] Vulnerability due to usage of commons-fileupload:commons-fileupload:1.2.2

  #75 opened 6 years ago by sonatype-depshield
  0

• [DepShield] Usage of commons-collections:commons-collections:3.1 results in vulnerability to [CVE-2015-6420] Serialized-object interfaces in certain Cisco Collaboration and Social Media; En...

  #62 opened 6 years ago by sonatype-depshield
  1

• [DepShield] Usage of commons-collections:commons-collections:3.1 results in vulnerability to [CVE-2017-15708] In Apache Synapse, by default no authentication is required for Java Remote Meth...

  #61 opened 6 years ago by sonatype-depshield
  1

• [DepShield] Vulnerability due to usage of commons-collections:commons-collections:3.1

  #74 opened 6 years ago by sonatype-depshield
  0

• [DepShield] Usage of com.fasterxml.jackson.core:jackson-databind:2.0.4 results in vulnerability to [CVE-2017-17485] Improper Control of Generation of Code ("Code Injection")

  #60 opened 6 years ago by sonatype-depshield
  1

• [DepShield] Usage of com.fasterxml.jackson.core:jackson-databind:2.0.4 results in vulnerability to [CVE-2018-5968] Incomplete Blacklist, Deserialization of Untrusted Data

  #59 opened 6 years ago by sonatype-depshield
  1

• [DepShield] Usage of com.fasterxml.jackson.core:jackson-databind:2.0.4 results in vulnerability to [CVE-2018-7489] Incomplete Blacklist, Deserialization of Untrusted Data

  #58 opened 6 years ago by sonatype-depshield
  1

• [DepShield] Usage of com.fasterxml.jackson.core:jackson-databind:2.0.4 results in vulnerability to [CVE-2017-7525] Deserialization of Untrusted Data

  #57 opened 6 years ago by sonatype-depshield
  1

• [DepShield] Usage of com.fasterxml.jackson.core:jackson-databind:2.0.4 results in vulnerability to [CVE-2017-15095] Deserialization of Untrusted Data

  #56 opened 6 years ago by sonatype-depshield
  1

• [DepShield] Vulnerability due to usage of com.fasterxml.jackson.core:jackson-databind:2.0.4

  #73 opened 6 years ago by sonatype-depshield
  0

• [DepShield] Usage of taglibs:standard:1.1.2 results in vulnerability to [CVE-2015-0254] Apache Standard Taglibs before 1.2.3 allows remote attackers to execute arbitrar...

  #68 opened 6 years ago by sonatype-depshield
  1

• [DepShield] Vulnerability due to usage of taglibs:standard:1.1.2

  #72 opened 6 years ago by sonatype-depshield
  0

• [DepShield] Usage of org.springframework:spring-webmvc:3.2.4.RELEASE results in vulnerability to [CVE-2016-9878] Improper Limitation of a Pathname to a Restricted Directory ("Path Traversal")

  #67 opened 6 years ago by sonatype-depshield
  1

• [DepShield] Vulnerability due to usage of org.springframework:spring-webmvc:3.2.4.RELEASE

  #71 opened 6 years ago by sonatype-depshield
  0

• [DepShield] Usage of javax.servlet:jstl:1.2 results in vulnerability to [CVE-2015-0254] Apache Standard Taglibs before 1.2.3 allows remote attackers to execute arbitrar...

  #66 opened 6 years ago by sonatype-depshield
  1

• [DepShield] Vulnerability due to usage of javax.servlet:jstl:1.2

  #70 opened 6 years ago by sonatype-depshield
  0

• [DepShield] Vulnerability due to usage of org.springframework:spring-core:3.2.4.RELEASE

  #69 opened 6 years ago by sonatype-depshield
  0

• Unable to compile class for JSP alert comes when I try to access labs of webgoat 6.0. Kindly help.

  #54 opened 9 years ago by Vinita16
  4

• Change Default Port

  #53 opened 9 years ago by augustd
  0

• Fails to Build because of missing dependency 'javax.transaction:jta:1.0.1B'

  #49 opened 9 years ago by vamshikr
  6

• Stored XSS Attacks challenge is not working

  #43 opened 10 years ago by gartmann
  3

• Couldn't download the jar file

  #23 opened 10 years ago by arajparaj
  3