CSRF @ /Controllers/PasswordResetsController.cs

[msant262]

Checkmarx (SAST): CSRF
Security Issue: Read More about CSRF
Checkmarx Project: Nova-8/Damm-Vulnerable-CSharp-API
Repository URL: https://github.com/Nova-8/Damm-Vulnerable-CSharp-API
Branch: master
Scan ID: 2f22541b-da6c-459f-9285-99da61e0ed7d

---

Method Post at line 63 of /Controllers/PasswordResetsController.cs gets a parameter from a user request from Post. This parameter value flows through the code and is eventually used to access application state altering functionality. This may enable Cross-Site Request Forgery (CSRF).

Result 1:
Severity: MEDIUM
State: TO_VERIFY
Status: RECURRENT
Attack Vector:

    1. Post: /Controllers/PasswordResetsController.cs[63,28]
    Review result in Checkmarx One: CSRF