{"action":"closed","issue":{"url":"https://api.github.com/repos/uclibs/scholar_uc/issues/445","labels_url":"https://api.github.com/repos/uclibs/scholar_uc/issues/445/labels{/name}","comments_url":"https://api.github.com/repos/uclibs/scholar_uc/issues/445/comments","events_url":"https://api.github.com/repos/uclibs/scholar_uc/issues/445/events","html_url":"https://github.com/uclibs/scholar_uc/issues/445","id":102924186,"number":445,"title":"Set E - Possible Exception Vulnerability","user":{"login":"scherztc","id":5084562,"avatar_url":"https://avatars.githubusercontent.com/u/5084562?v=3","gravatar_id":"","url":"https://api.github.com/users/scherztc","html_url":"https://github.com/scherztc","followers_url":"https://api.github.com/users/scherztc/followers","following_url":"https://api.github.com/users/scherztc/following{/other_user}","gists_url":"https://api.github.com/users/scherztc/gists{/gist_id}","starred_url":"https://api.github.com/users/scherztc/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/scherztc/subscriptions","organizations_url":"https://api.github.com/users/scherztc/orgs","repos_url":"https://api.github.com/users/scherztc/repos","events_url":"https://api.github.com/users/scherztc/events{/privacy}","received_events_url":"https://api.github.com/users/scherztc/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/uclibs/scholar_uc/labels/1.0%20Release%20?","name":"1.0 Release ?","color":"009800"},{"url":"https://api.github.com/repos/uclibs/scholar_uc/labels/3%20-%20Done","name":"3 - Done","color":"CCCCCC"},{"url":"https://api.github.com/repos/uclibs/scholar_uc/labels/security","name":"security","color":"fbca04"}],"state":"closed","locked":false,"assignee":{"login":"scherztc","id":5084562,"avatar_url":"https://avatars.githubusercontent.com/u/5084562?v=3","gravatar_id":"","url":"https://api.github.com/users/scherztc","html_url":"https://github.com/scherztc","followers_url":"https://api.github.com/users/scherztc/followers","following_url":"https://api.github.com/users/scherztc/following{/other_user}","gists_url":"https://api.github.com/users/scherztc/gists{/gist_id}","starred_url":"https://api.github.com/users/scherztc/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/scherztc/subscriptions","organizations_url":"https://api.github.com/users/scherztc/orgs","repos_url":"https://api.github.com/users/scherztc/repos","events_url":"https://api.github.com/users/scherztc/events{/privacy}","received_events_url":"https://api.github.com/users/scherztc/received_events","type":"User","site_admin":false},"milestone":{"url":"https://api.github.com/repos/uclibs/scholar_uc/milestones/28","html_url":"https://github.com/uclibs/scholar_uc/milestones/Sprint%20Ending%208/28/2015","labels_url":"https://api.github.com/repos/uclibs/scholar_uc/milestones/28/labels","id":1239056,"number":28,"title":"Sprint Ending 8/28/2015","description":"","creator":{"login":"scherztc","id":5084562,"avatar_url":"https://avatars.githubusercontent.com/u/5084562?v=3","gravatar_id":"","url":"https://api.github.com/users/scherztc","html_url":"https://github.com/scherztc","followers_url":"https://api.github.com/users/scherztc/followers","following_url":"https://api.github.com/users/scherztc/following{/other_user}","gists_url":"https://api.github.com/users/scherztc/gists{/gist_id}","starred_url":"https://api.github.com/users/scherztc/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/scherztc/subscriptions","organizations_url":"https://api.github.com/users/scherztc/orgs","repos_url":"https://api.github.com/users/scherztc/repos","events_url":"https://api.github.com/users/scherztc/events{/privacy}","received_events_url":"https://api.github.com/users/scherztc/received_events","type":"User","site_admin":false},"open_issues":23,"closed_issues":8,"state":"open","created_at":"2015-08-03T19:38:17Z","updated_at":"2015-08-31T18:39:59Z","due_on":null,"closed_at":null},"comments":0,"created_at":"2015-08-25T00:55:49Z","updated_at":"2015-08-31T18:39:59Z","closed_at":"2015-08-31T18:39:59Z","body":"Summary\r\nAssessment\tOWASP-2013 (Set E) - Application/Unhandled Errors\r\nFound On\t8/24/2015 4:30:10 PM\r\nReport\tWarning - Possible application exception vulnerability.\r\nSeverity\tMedium\r\nSmartAttack\tApplication Exception - [OWASP 2013 A 5]\r\nVulnerability\tApp\r\nVulnerability Id\tCWE-388\r\nURL\thttps://scholar-qa.uc.edu/hydramata/groups   (Render Response)\r\n  \r\n\r\nMessage\r\nPossible application exception vulnerability.\r\nServer response status: 500\r\nInternal server error\r\nInjectable request #: 15\r\nInjected item: POST: hydramata_group%5Bmembers_attributes%5D%5B1%5D%5Bid%5D\r\nInjection value: %00\r\n\r\n<!---\r\n@huboard:{\"order\":398.181640625,\"milestone_order\":445,\"custom_state\":\"\"}\n-->\r\n"}}