Project

General

Profile

Actions
Copy link

SecOps #1501

open
CD

[Sécurité] Vulnérabilité de code : cron-service.js:1831 (problem-based-packs.insecure-transport.js-node.using-http-server.using-http-server)

SecOps #1501: [Sécurité] Vulnérabilité de code : cron-service.js:1831 (problem-based-packs.insecure-transport.js-node.using-http-server.using-http-server)

Added by Client Dashboard 11 days ago. Updated 11 days ago.

Status:
Submitted
Priority:
Normal
Assignee:
-
Start date:
07/24/2026
Due date:
% Done:

0%

Estimated time:
spec_ref:
build_status:
build_number:
ci_run_url:
scan_status:
scan_report_url:
deploy_status:
preprod_url:
deployed_at:
branch:
pr_url:
security_key:
cron-service.js:1831_problem-based-packs.insecure-transport.js-node.using-http-server.using-http-server
severity:
medium
paused:

Description

**Sévérité** : MEDIUM
**Source** : Semgrep
`vuln-medium`
**Emplacement** : cron-service.js:1831
**Règle** : problem-based-packs.insecure-transport.js-node.using-http-server.using-http-server

Checks for any usage of http servers instead of https servers. Encourages the usage of https protocol instead of http, which does not have TLS and is therefore unencrypted. Using http can lead to man-in-the-middle attacks in which the attacker is able to read sensitive information.

### Extrait de code
```
requires login
```

### Lien CVE
https://nodejs.org/api/http.html#http_class_http_agent

CD Updated by Client Dashboard 11 days ago Actions
Copy link
 #1

Vulnérabilité `cron-service.js:1831_problem-based-packs.insecure-transport.js-node.using-http-server.using-http-server` à nouveau détectée par un scan ; ticket déjà ouvert (aucun doublon créé).

Actions
Copy link

Also available in: PDF Atom