Skip to content

Conversation

@hazco75
Copy link
Contributor

@hazco75 hazco75 commented Nov 21, 2025

Description

Gestion de l'affichage des erreurs lors de la création et de la mise à jour de métadonnées sur Collecte

@hazco75 hazco75 added this to the IT 162 milestone Nov 21, 2025
@vitam-prg
Copy link
Collaborator

vitam-prg commented Nov 21, 2025

Logo
Checkmarx One – Scan Summary & Detailsafc977fa-6a24-4daa-a73d-75f5e6b421f5

New Issues (107)

Checkmarx found the following issues in this Pull Request

# Severity Issue Source File / Package Checkmarx Insight
1 MEDIUM Privacy_Violation /api/api-iam/iam-security/src/main/java/fr/gouv/vitamui/iam/security/service/SecurityService.java: 85
detailsMethod getTenantIdentifier at line 85 of /api/api-iam/iam-security/src/main/java/fr/gouv/vitamui/iam/security/service/SecurityService.java sends...
Attack Vector
2 MEDIUM Privacy_Violation /api/api-iam/iam-security/src/main/java/fr/gouv/vitamui/iam/security/service/SecurityService.java: 175
detailsMethod getApplicationId at line 175 of /api/api-iam/iam-security/src/main/java/fr/gouv/vitamui/iam/security/service/SecurityService.java sends u...
Attack Vector
3 MEDIUM Privacy_Violation /api/api-iam/iam-security/src/main/java/fr/gouv/vitamui/iam/security/service/SecurityService.java: 85
detailsMethod getTenantIdentifier at line 85 of /api/api-iam/iam-security/src/main/java/fr/gouv/vitamui/iam/security/service/SecurityService.java sends...
Attack Vector
4 MEDIUM Privacy_Violation /api/api-iam/iam-security/src/main/java/fr/gouv/vitamui/iam/security/service/SecurityService.java: 85
detailsMethod getTenantIdentifier at line 85 of /api/api-iam/iam-security/src/main/java/fr/gouv/vitamui/iam/security/service/SecurityService.java sends...
Attack Vector
5 MEDIUM Privacy_Violation /api/api-iam/iam-security/src/main/java/fr/gouv/vitamui/iam/security/service/SecurityService.java: 85
detailsMethod getTenantIdentifier at line 85 of /api/api-iam/iam-security/src/main/java/fr/gouv/vitamui/iam/security/service/SecurityService.java sends...
Attack Vector
6 MEDIUM Privacy_Violation /api/api-iam/iam-security/src/main/java/fr/gouv/vitamui/iam/security/service/SecurityService.java: 175
detailsMethod getApplicationId at line 175 of /api/api-iam/iam-security/src/main/java/fr/gouv/vitamui/iam/security/service/SecurityService.java sends u...
Attack Vector
7 MEDIUM Privacy_Violation /api/api-iam/iam-security/src/main/java/fr/gouv/vitamui/iam/security/service/SecurityService.java: 175
detailsMethod getApplicationId at line 175 of /api/api-iam/iam-security/src/main/java/fr/gouv/vitamui/iam/security/service/SecurityService.java sends u...
Attack Vector
8 MEDIUM Privacy_Violation /api/api-iam/iam-security/src/main/java/fr/gouv/vitamui/iam/security/service/SecurityService.java: 175
detailsMethod getApplicationId at line 175 of /api/api-iam/iam-security/src/main/java/fr/gouv/vitamui/iam/security/service/SecurityService.java sends u...
Attack Vector
9 LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java: 215
detailsMethod streamingUploadSip at line 215 of /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java gets u...
Attack Vector
10 LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java: 216
detailsMethod streamingUploadSip at line 216 of /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java gets u...
Attack Vector
11 LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java: 216
detailsMethod streamingUploadSip at line 216 of /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java gets u...
Attack Vector
12 LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java: 216
detailsMethod streamingUploadSip at line 216 of /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java gets u...
Attack Vector
13 LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/TransactionController.java: 166
detailsMethod updateArchiveUnitsMetadataFromCsvFile at line 166 of /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/Transaction...
Attack Vector
14 LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java: 194
detailsMethod streamingUpload at line 194 of /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java gets user...
Attack Vector
15 LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java: 193
detailsMethod streamingUpload at line 193 of /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java gets user...
Attack Vector
16 LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java: 192
detailsMethod streamingUpload at line 192 of /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java gets user...
Attack Vector
17 LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java: 195
detailsMethod streamingUpload at line 195 of /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java gets user...
Attack Vector
18 LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java: 193
detailsMethod streamingUpload at line 193 of /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java gets user...
Attack Vector
19 LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java: 195
detailsMethod streamingUpload at line 195 of /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java gets user...
Attack Vector
20 LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java: 193
detailsMethod streamingUpload at line 193 of /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java gets user...
Attack Vector
21 LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java: 195
detailsMethod streamingUpload at line 195 of /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java gets user...
Attack Vector
22 LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/TransactionController.java: 168
detailsMethod updateArchiveUnitsMetadataFromCsvFile at line 168 of /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/Transaction...
Attack Vector
23 LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/TransactionController.java: 166
detailsMethod updateArchiveUnitsMetadataFromCsvFile at line 166 of /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/Transaction...
Attack Vector
24 LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/TransactionController.java: 166
detailsMethod updateArchiveUnitsMetadataFromCsvFile at line 166 of /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/Transaction...
Attack Vector
25 LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/TransactionController.java: 201
detailsMethod downloadSipTransaction at line 201 of /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/TransactionController.jav...
Attack Vector
26 LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/TransactionController.java: 201
detailsMethod downloadSipTransaction at line 201 of /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/TransactionController.jav...
Attack Vector
27 LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/TransactionController.java: 201
detailsMethod downloadSipTransaction at line 201 of /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/TransactionController.jav...
Attack Vector
28 LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/TransactionController.java: 201
detailsMethod downloadSipTransaction at line 201 of /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/TransactionController.jav...
Attack Vector
29 LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java: 287
detailsMethod updateProjectConfiguration at line 287 of /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.jav...
Attack Vector
30 LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java: 236
detailsMethod updateProjectDescription at line 236 of /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java ...
Attack Vector
31 LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java: 253
detailsMethod updateProjectContext at line 253 of /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java gets...
Attack Vector
32 LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java: 287
detailsMethod updateProjectConfiguration at line 287 of /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.jav...
Attack Vector
33 LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java: 270
detailsMethod updateProjectAttachments at line 270 of /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java ...
Attack Vector
34 LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java: 236
detailsMethod updateProjectDescription at line 236 of /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java ...
Attack Vector
35 LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java: 253
detailsMethod updateProjectContext at line 253 of /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java gets...
Attack Vector
36 LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java: 288
detailsMethod updateProjectConfiguration at line 288 of /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.jav...
Attack Vector
37 LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java: 287
detailsMethod updateProjectConfiguration at line 287 of /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.jav...
Attack Vector
38 LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java: 253
detailsMethod updateProjectContext at line 253 of /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java gets...
Attack Vector
39 LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java: 254
detailsMethod updateProjectContext at line 254 of /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java gets...
Attack Vector
40 LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java: 237
detailsMethod updateProjectDescription at line 237 of /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java ...
Attack Vector
41 LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java: 236
detailsMethod updateProjectDescription at line 236 of /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java ...
Attack Vector
42 LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java: 288
detailsMethod updateProjectConfiguration at line 288 of /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.jav...
Attack Vector
43 LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java: 254
detailsMethod updateProjectContext at line 254 of /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java gets...
Attack Vector
44 LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java: 237
detailsMethod updateProjectDescription at line 237 of /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java ...
Attack Vector
45 LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java: 270
detailsMethod updateProjectAttachments at line 270 of /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java ...
Attack Vector
46 LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java: 271
detailsMethod updateProjectAttachments at line 271 of /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java ...
Attack Vector
47 LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java: 270
detailsMethod updateProjectAttachments at line 270 of /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java ...
Attack Vector
48 LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java: 271
detailsMethod updateProjectAttachments at line 271 of /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java ...
Attack Vector
49 LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/TransactionController.java: 185
detailsMethod reclassification at line 185 of /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/TransactionController.java gets...
Attack Vector
50 LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/TransactionController.java: 186
detailsMethod reclassification at line 186 of /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/TransactionController.java gets...
Attack Vector
51 LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/TransactionController.java: 186
detailsMethod reclassification at line 186 of /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/TransactionController.java gets...
Attack Vector
52 LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/TransactionController.java: 186
detailsMethod reclassification at line 186 of /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/TransactionController.java gets...
Attack Vector
53 LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/TransactionController.java: 186
detailsMethod reclassification at line 186 of /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/TransactionController.java gets...
Attack Vector
54 LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/TransactionController.java: 186
detailsMethod reclassification at line 186 of /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/TransactionController.java gets...
Attack Vector
55 LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/TransactionController.java: 186
detailsMethod reclassification at line 186 of /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/TransactionController.java gets...
Attack Vector
56 LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/TransactionController.java: 186
detailsMethod reclassification at line 186 of /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/TransactionController.java gets...
Attack Vector
57 LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/TransactionController.java: 186
detailsMethod reclassification at line 186 of /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/TransactionController.java gets...
Attack Vector
58 LOW Log_Forging /api/api-iam/iam-security/src/main/java/fr/gouv/vitamui/iam/security/service/SecurityService.java: 175
detailsMethod getApplicationId at line 175 of /api/api-iam/iam-security/src/main/java/fr/gouv/vitamui/iam/security/service/SecurityService.java gets us...
Attack Vector
59 LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java: 174
detailsMethod createTransactionForProject at line 174 of /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.ja...
Attack Vector
60 LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/TransactionController.java: 147
detailsMethod updateTransaction at line 147 of /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/TransactionController.java get...
Attack Vector
61 LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java: 174
detailsMethod createTransactionForProject at line 174 of /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.ja...
Attack Vector
62 LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/TransactionController.java: 113
detailsMethod abortTransaction at line 113 of /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/TransactionController.java gets...
Attack Vector
63 LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java: 173
detailsMethod createTransactionForProject at line 173 of /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.ja...
Attack Vector
64 LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java: 98
detailsMethod getAllPaginated at line 98 of /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java gets user ...
Attack Vector

More results are available on the CxOne platform


Use @Checkmarx to interact with Checkmarx PR Assistant.
Examples:
@Checkmarx how are you able to help me?
@Checkmarx rescan this PR

@hazco75 hazco75 force-pushed the story_15015_csv_errors branch 2 times, most recently from b1799ae to 52a580c Compare December 7, 2025 00:36
@hazco75 hazco75 force-pushed the story_15015_csv_errors branch 4 times, most recently from 93afa9a to b2d9f0d Compare December 17, 2025 09:53
@hazco75 hazco75 force-pushed the story_15015_csv_errors branch from b2d9f0d to dd9a5af Compare January 20, 2026 14:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants