-
Type:
Bug
-
Status:
Open
-
Priority:
Medium
-
Resolution:
Unresolved
-
Affects Version/s:
None
-
Fix Version/s:
None
-
Component/s:
None
-
-
-
-
Module:
BenAdmin
- Security
-
[Security Test] Postal Code and Work Phone fields can be manipulated by inserting invalid values from proxy tool.
1. Login as Employee and traverse the self serve mode till Add beneficiary page
2. Add/Update beneficiary details and enter the valid Postal Code and Work Phone
3. Open Tamper Data tool and click on start Tamper
4. Go to the Add/Update beneficiary page and save the beneficiary details.
5. Click on Tamper Data button and Go to Tamper Data Post parameter page to insert invalid Postal COde and Work Phone.
6. Click on OK button to fire the POST request again.
7. Invalid data gets saved.
Server Side input validations needs to be implemented throughout the workterra application.
No workflow transitions have been executed yet.
{"report":{"apdex":0.5,"isInitial":true,"journeyId":"6f8fbc63-90b1-46ef-b3f8-fab2a44d5e34","key":"jira.project.issue.view-issue","navigationType":0,"readyForUser":1036.0999999642372,"redirectCount":0,"resourceLoadedEnd":1078.8999999761581,"resourceLoadedStart":181.39999997615814,"resourceTiming":[{"duration":469.10000002384186,"initiatorType":"link","name":"https://jira.workterra.net/s/3003653444a1e1a85555cab7dcfb3a21-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/2e46d90b5cae895c9c38649c9d510130/_/download/contextbatch/css/_super/batch.css","startTime":181.39999997615814,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":181.39999997615814,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":650.5,"responseStart":0,"secureConnectionStart":0},{"duration":468.80000001192093,"initiatorType":"link","name":"https://jira.workterra.net/s/dd6a0911920485696ac20493290df627-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/3abe50d469404b639745df44b51476b6/_/download/contextbatch/css/jira.browse.project,jira.view.issue,project.issue.navigator,jira.global,atl.general,-_super/batch.css?agile_global_admin_condition=true&jag=true&jira.create.linked.issue=true&richediton=true","startTime":181.69999998807907,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":181.69999998807907,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":650.5,"responseStart":0,"secureConnectionStart":0},{"duration":468.89999997615814,"initiatorType":"link","name":"https://jira.workterra.net/s/d41d8cd98f00b204e9800998ecf8427e-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/8.5.0/_/download/batch/com.atlassian.auiplugin:split_aui.pattern.label/com.atlassian.auiplugin:split_aui.pattern.label.css","startTime":181.80000001192093,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":181.80000001192093,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":650.6999999880791,"responseStart":0,"secureConnectionStart":0},{"duration":468.80000001192093,"initiatorType":"link","name":"https://jira.workterra.net/s/bd548f27bbf8f278bd83b60dd3284ed8-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/1.0/_/download/batch/jira.webresources:global-static-adgs/jira.webresources:global-static-adgs.css","startTime":181.89999997615814,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":181.89999997615814,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":650.6999999880791,"responseStart":0,"secureConnectionStart":0},{"duration":468.89999997615814,"initiatorType":"link","name":"https://jira.workterra.net/s/70725731a158a7140f19ddbd4201ba27-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/1.0/_/download/batch/jira.webresources:global-static/jira.webresources:global-static.css","startTime":182,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":182,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":650.8999999761581,"responseStart":0,"secureConnectionStart":0},{"duration":478,"initiatorType":"script","name":"https://jira.workterra.net/s/f2623af22c15df767ec6ff268ae0b8bd-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/2e46d90b5cae895c9c38649c9d510130/_/download/contextbatch/js/_super/batch.js?locale=en-US","startTime":182.19999998807907,"connectEnd":182.19999998807907,"connectStart":182.19999998807907,"domainLookupEnd":182.19999998807907,"domainLookupStart":182.19999998807907,"fetchStart":182.19999998807907,"redirectEnd":0,"redirectStart":0,"requestStart":182.19999998807907,"responseEnd":660.1999999880791,"responseStart":660.1999999880791,"secureConnectionStart":182.19999998807907},{"duration":521.5,"initiatorType":"script","name":"https://jira.workterra.net/s/6ce676f2a5bcc9651cef6e7956f05def-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/3abe50d469404b639745df44b51476b6/_/download/contextbatch/js/jira.browse.project,jira.view.issue,project.issue.navigator,jira.global,atl.general,-_super/batch.js?agile_global_admin_condition=true&jag=true&jira.create.linked.issue=true&locale=en-US&richediton=true","startTime":182.30000001192093,"connectEnd":182.30000001192093,"connectStart":182.30000001192093,"domainLookupEnd":182.30000001192093,"domainLookupStart":182.30000001192093,"fetchStart":182.30000001192093,"redirectEnd":0,"redirectStart":0,"requestStart":182.30000001192093,"responseEnd":703.8000000119209,"responseStart":703.8000000119209,"secureConnectionStart":182.30000001192093},{"duration":524.3000000119209,"initiatorType":"script","name":"https://jira.workterra.net/s/ecf7ec549751ae117b778f0525d6d371-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/4.1.5/_/download/resources/com.atlassian.plugins.atlassian-chaperone:hotspot-tour/hotspot-tour.js?batch=false&locale=en-US","startTime":182.39999997615814,"connectEnd":182.39999997615814,"connectStart":182.39999997615814,"domainLookupEnd":182.39999997615814,"domainLookupStart":182.39999997615814,"fetchStart":182.39999997615814,"redirectEnd":0,"redirectStart":0,"requestStart":182.39999997615814,"responseEnd":706.6999999880791,"responseStart":706.6999999880791,"secureConnectionStart":182.39999997615814},{"duration":524.8000000119209,"initiatorType":"script","name":"https://jira.workterra.net/s/6aa3fcf1fac5fd551eee0b69077524e6-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/aae1242f5fc81cc6a5bb8bc963ccda29/_/download/contextbatch/js/atl.global,-_super/batch.js?locale=en-US","startTime":182.5,"connectEnd":182.5,"connectStart":182.5,"domainLookupEnd":182.5,"domainLookupStart":182.5,"fetchStart":182.5,"redirectEnd":0,"redirectStart":0,"requestStart":182.5,"responseEnd":707.3000000119209,"responseStart":707.3000000119209,"secureConnectionStart":182.5},{"duration":525,"initiatorType":"script","name":"https://jira.workterra.net/s/d41d8cd98f00b204e9800998ecf8427e-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/1.0/_/download/batch/jira.webresources:calendar-en/jira.webresources:calendar-en.js","startTime":182.69999998807907,"connectEnd":182.69999998807907,"connectStart":182.69999998807907,"domainLookupEnd":182.69999998807907,"domainLookupStart":182.69999998807907,"fetchStart":182.69999998807907,"redirectEnd":0,"redirectStart":0,"requestStart":182.69999998807907,"responseEnd":707.6999999880791,"responseStart":707.6999999880791,"secureConnectionStart":182.69999998807907},{"duration":525.1999999880791,"initiatorType":"script","name":"https://jira.workterra.net/s/d41d8cd98f00b204e9800998ecf8427e-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/1.0/_/download/batch/jira.webresources:calendar-localisation-moment/jira.webresources:calendar-localisation-moment.js","startTime":182.80000001192093,"connectEnd":182.80000001192093,"connectStart":182.80000001192093,"domainLookupEnd":182.80000001192093,"domainLookupStart":182.80000001192093,"fetchStart":182.80000001192093,"redirectEnd":0,"redirectStart":0,"requestStart":182.80000001192093,"responseEnd":708,"responseStart":708,"secureConnectionStart":182.80000001192093},{"duration":526.1000000238419,"initiatorType":"link","name":"https://jira.workterra.net/s/05c862146699bb029ceb0a489075e63b-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/bcd66e9a133a1b9f5fd14b56841e1c5b/_/download/contextbatch/css/jira.global.look-and-feel,-_super/batch.css","startTime":182.89999997615814,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":182.89999997615814,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":709,"responseStart":0,"secureConnectionStart":0},{"duration":525.6000000238419,"initiatorType":"script","name":"https://jira.workterra.net/s/ecf7ec549751ae117b778f0525d6d371-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/8.5.0/_/download/batch/com.atlassian.auiplugin:split_aui.pattern.label/com.atlassian.auiplugin:split_aui.pattern.label.js?locale=en-US","startTime":182.89999997615814,"connectEnd":182.89999997615814,"connectStart":182.89999997615814,"domainLookupEnd":182.89999997615814,"domainLookupStart":182.89999997615814,"fetchStart":182.89999997615814,"redirectEnd":0,"redirectStart":0,"requestStart":182.89999997615814,"responseEnd":708.5,"responseStart":708.5,"secureConnectionStart":182.89999997615814},{"duration":525.9000000357628,"initiatorType":"script","name":"https://jira.workterra.net/rest/api/1.0/shortcuts/805012/81da1c7492d7ee698ae1cc31902498d9/shortcuts.js?context=issuenavigation&context=issueaction","startTime":183.0999999642372,"connectEnd":183.0999999642372,"connectStart":183.0999999642372,"domainLookupEnd":183.0999999642372,"domainLookupStart":183.0999999642372,"fetchStart":183.0999999642372,"redirectEnd":0,"redirectStart":0,"requestStart":183.0999999642372,"responseEnd":709,"responseStart":709,"secureConnectionStart":183.0999999642372},{"duration":526.3999999761581,"initiatorType":"link","name":"https://jira.workterra.net/s/9095228fa10daa2d3e3d7d5760c95e91-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/72477c22780abda5f51fe696920d843f/_/download/contextbatch/css/com.atlassian.jira.projects.sidebar.init,-_super,-jira.view.issue,-project.issue.navigator/batch.css?jira.create.linked.issue=true&richediton=true","startTime":183.19999998807907,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":183.19999998807907,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":709.5999999642372,"responseStart":0,"secureConnectionStart":0},{"duration":526.5,"initiatorType":"script","name":"https://jira.workterra.net/s/c19a1b46e985d7fb85efaf27c8febfdd-CDN/-w431t5/805012/9a9e1fae3639050b38ac467c3aa37e79/72477c22780abda5f51fe696920d843f/_/download/contextbatch/js/com.atlassian.jira.projects.sidebar.init,-_super,-jira.view.issue,-project.issue.navigator/batch.js?jira.create.linked.issue=true&locale=en-US&richediton=true","startTime":183.19999998807907,"connectEnd":183.19999998807907,"connectStart":183.19999998807907,"domainLookupEnd":183.19999998807907,"domainLookupStart":183.19999998807907,"fetchStart":183.19999998807907,"redirectEnd":0,"redirectStart":0,"requestStart":183.19999998807907,"responseEnd":709.6999999880791,"responseStart":709.6999999880791,"secureConnectionStart":183.19999998807907}],"threshold":1000,"fetchStart":0,"domainLookupStart":0,"domainLookupEnd":0,"connectStart":0,"connectEnd":0,"requestStart":40,"responseStart":175,"responseEnd":177,"domLoading":179,"domInteractive":1105,"domContentLoadedEventStart":1105,"domContentLoadedEventEnd":1143,"domComplete":1340,"loadEventStart":1340,"loadEventEnd":1342,"userAgent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","marks":[],"measures":[],"correlationId":"c88d8101cee0e9","effectiveType":"4g","downlink":10,"rtt":0,"serverDuration":63,"dbReadsTimeInMs":18,"dbConnsTimeInMs":20,"applicationHash":"156decd7d2b4272533aa6cefc8294af635e1da97","experiments":[]}}