Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

dotnet-architecture/eshoponweb

              main @ 4da8212
            

Fixes

CVEs

HIGH

Peak severity

25.0%

Coverage

Highlights

Auth Bypass: 3 prior fixes. Scrutinize any change in this area.

src/PublicApi/AuthEndpoints/Authenticate.cs: most-fixed (1 issue). Treat as high-risk during review.

1 high-severity fix in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: Unsafe handling of invalid credentials or usernames in the token generation flow could result in a NullReferenceException or unauthorized token issuance, bypassing standard authentication checks.

Auth Bypass: Two-factor authentication recovery codes could be regenerated via HTTP GET requests without proper anti-forgery validation, exposing users to cross-site request forgery (CSRF/anti-forgery bypass) and elevation of privilege (CVE-2018-0784 / CVE-2018-0785).

Insecure Direct Object Reference: Failure to validate that anonymous basket identifiers in cookies were cryptographically strong GUIDs allowed attackers to manipulate or transfer arbitrary shopping baskets.