TEST: ZAP Full Scan Report

[dominicwest]

• Site: https://test-env.find-a-grant-support-test.service.cabinetoffice.gov.uk
  New Alerts

  • PII Disclosure [10062] total: 5:
    • https://test-env.find-a-grant-support-test.service.cabinetoffice.gov.uk/grants
    • https://test-env.find-a-grant-support-test.service.cabinetoffice.gov.uk/grants/chargepoint-grant-for-people-renting-and-living-in-flats
    • https://test-env.find-a-grant-support-test.service.cabinetoffice.gov.uk/grants?href=%2Fgrants
    • https://test-env.find-a-grant-support-test.service.cabinetoffice.gov.uk/grants?href=%2Fgrants&limit=10&page=1&skip=0
    • https://test-env.find-a-grant-support-test.service.cabinetoffice.gov.uk/grants?limit=10&page=1&skip=0
  • Application Error Disclosure [90022] total: 1:
    • https://test-env.find-a-grant-support-test.service.cabinetoffice.gov.uk/apply/chargepoint-grant
  • Dangerous JS Functions [10110] total: 1:
    • https://test-env.find-a-grant-support-test.service.cabinetoffice.gov.uk/javascript/govuk.js
  • Information Disclosure - Debug Error Messages [10023] total: 1:
    • https://test-env.find-a-grant-support-test.service.cabinetoffice.gov.uk/apply/chargepoint-grant
  • Server Leaks Information via "X-Powered-By" HTTP Response Header Field(s) [10037] total: 11:
    • https://test-env.find-a-grant-support-test.service.cabinetoffice.gov.uk/
    • https://test-env.find-a-grant-support-test.service.cabinetoffice.gov.uk//
    • https://test-env.find-a-grant-support-test.service.cabinetoffice.gov.uk/404
    • https://test-env.find-a-grant-support-test.service.cabinetoffice.gov.uk/info/about-us
    • https://test-env.find-a-grant-support-test.service.cabinetoffice.gov.uk/info/accessibility
    • ..
  • Timestamp Disclosure - Unix [10096] total: 1:
    • https://test-env.find-a-grant-support-test.service.cabinetoffice.gov.uk/_next/static/css/e95c8a7eed531dc8.css
  • Content-Type Header Missing [10019] total: 3:
    • https://test-env.find-a-grant-support-test.service.cabinetoffice.gov.uk/newsletter/confirmation
    • https://test-env.find-a-grant-support-test.service.cabinetoffice.gov.uk/save-search?fields.grantApplicantType.en-US=1&fields.grantLocation.en-US=1&fields.grantMaximumAward.en-US=1&from-day=ZAP&from-month=ZAP&from-year=ZAP&href=/grants&searchTerm=ZAP&sortBy=closingDate&to-day=ZAP&to-month=ZAP&to-year=ZAP
    • https://test-env.find-a-grant-support-test.service.cabinetoffice.gov.uk/subscriptions/confirmation
  • Information Disclosure - Sensitive Information in URL [10024] total: 13:
    • https://test-env.find-a-grant-support-test.service.cabinetoffice.gov.uk/newsletter/signup?errors%5B%5D=%7B%22field%22:%22user_email%22,%22error%22:%22Enter%20an%20email%20address%20in%20the%20correct%20format,%20like%20name@example.com%22%7D&notification_privacy=on&user_email=ZAP
    • https://test-env.find-a-grant-support-test.service.cabinetoffice.gov.uk/newsletter/signup?errors%5B%5D=%7B%22field%22:%22user_email%22,%22error%22:%22Enter%20an%20email%20address%20in%20the%20correct%20format,%20like%20name@example.com%22%7D&notification_privacy=on&user_email=ZAP
    • https://test-env.find-a-grant-support-test.service.cabinetoffice.gov.uk/notifications/email-confirmation?email=zaproxy%40example.com
    • https://test-env.find-a-grant-support-test.service.cabinetoffice.gov.uk/subscriptions/signup?errors%5B%5D=%7B%22field%22:%22user_email%22,%22error%22:%22Enter%20an%20email%20address%20in%20the%20correct%20format,%20like%20name@example.com%22%7D&grantId=4mPl6sbdugRGZoqdXqvbVS&grantLabel=animal-biosecurity-infrastructure-fund&grantTitle=Animal+Biosecurity+Infrastructure+Fund+%2528ABIF%2529&id=animal-biosecurity-infrastructure-fund&notification_privacy=on&user_email=ZAP
    • https://test-env.find-a-grant-support-test.service.cabinetoffice.gov.uk/subscriptions/signup?errors%5B%5D=%7B%22field%22:%22user_email%22,%22error%22:%22Enter%20an%20email%20address%20in%20the%20correct%20format,%20like%20name@example.com%22%7D&grantId=4mPl6sbdugRGZoqdXqvbVS&grantLabel=animal-biosecurity-infrastructure-fund&grantTitle=Animal+Biosecurity+Infrastructure+Fund+%2528ABIF%2529&id=animal-biosecurity-infrastructure-fund&notification_privacy=on&user_email=ZAP
    • ..
  • Retrieved from Cache [10050] total: 12:
    • https://test-env.find-a-grant-support-test.service.cabinetoffice.gov.uk/
    • https://test-env.find-a-grant-support-test.service.cabinetoffice.gov.uk/_next/static/chunks/404-9a0dbb971daa1010.js
    • https://test-env.find-a-grant-support-test.service.cabinetoffice.gov.uk/_next/static/chunks/680-d9577d479cf40e8c.js
    • https://test-env.find-a-grant-support-test.service.cabinetoffice.gov.uk/_next/static/chunks/75fc9c18-e61c2e0d9c9a0957.js
    • https://test-env.find-a-grant-support-test.service.cabinetoffice.gov.uk/_next/static/chunks/pages/grants-ea39701c1a53bd1e.js
    • ..
  • User Controllable HTML Element Attribute (Potential XSS) [10031] total: 16:
    • https://test-env.find-a-grant-support-test.service.cabinetoffice.gov.uk/?searchTerm=ZAP
    • https://test-env.find-a-grant-support-test.service.cabinetoffice.gov.uk/grants?fields.grantApplicantType.en-US=1&fields.grantLocation.en-US=1&fields.grantMaximumAward.en-US=1&from-day=ZAP&from-month=ZAP&from-year=ZAP&searchTerm=ZAP&sortBy=closingDate&to-day=ZAP&to-month=ZAP&to-year=ZAP
    • https://test-env.find-a-grant-support-test.service.cabinetoffice.gov.uk/grants?fields.grantApplicantType.en-US=1&fields.grantLocation.en-US=1&fields.grantMaximumAward.en-US=1&from-day=ZAP&from-month=ZAP&from-year=ZAP&searchTerm=ZAP&sortBy=closingDate&to-day=ZAP&to-month=ZAP&to-year=ZAP
    • https://test-env.find-a-grant-support-test.service.cabinetoffice.gov.uk/grants?fields.grantApplicantType.en-US=1&fields.grantLocation.en-US=1&fields.grantMaximumAward.en-US=1&from-day=ZAP&from-month=ZAP&from-year=ZAP&searchTerm=ZAP&sortBy=closingDate&to-day=ZAP&to-month=ZAP&to-year=ZAP
    • https://test-env.find-a-grant-support-test.service.cabinetoffice.gov.uk/grants?fields.grantApplicantType.en-US=1&fields.grantLocation.en-US=1&fields.grantMaximumAward.en-US=1&from-day=ZAP&from-month=ZAP&from-year=ZAP&searchTerm=ZAP&sortBy=closingDate&to-day=ZAP&to-month=ZAP&to-year=ZAP
    • ..

  Ignored Alerts

  • Absence of Anti-CSRF Tokens [10202] total: 11:
  • Base64 Disclosure [10094] total: 12:
  • Information Disclosure - Suspicious Comments [10027] total: 11:
  • Modern Web Application [10109] total: 11:
  • Non-Storable Content [10049] total: 10:
  • Re-examine Cache-control Directives [10015] total: 2:
  • Storable and Cacheable Content [10049] total: 1:

View the following link to download the report.
RunnerID:5334021101