wcm.io Caravan
SpotBugs Bug Detector Report
The following document contains the results of SpotBugs
SpotBugs Version is 4.8.3
Threshold is medium
Effort is default
Summary
| Classes | Bugs | Errors | Missing Classes |
|---|---|---|---|
| 12 | 4 | 0 | 1 |
Files
| Class | Bugs |
|---|---|
| io.wcm.caravan.commons.httpclient.impl.HttpClientItem | 1 |
| io.wcm.caravan.commons.httpclient.impl.helpers.CertificateLoader | 3 |
io.wcm.caravan.commons.httpclient.impl.HttpClientItem
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| Exception thrown in class io.wcm.caravan.commons.httpclient.impl.HttpClientItem at new io.wcm.caravan.commons.httpclient.impl.HttpClientItem(HttpClientConfig) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. | BAD_PRACTICE | CT_CONSTRUCTOR_THROW | 75 | Medium |
io.wcm.caravan.commons.httpclient.impl.helpers.CertificateLoader
| Bug | Category | Details | Line | Priority |
|---|---|---|---|---|
| This API (java/io/File.<init>(Ljava/lang/String;)V) reads a file whose location might be specified by user input | SECURITY | PATH_TRAVERSAL_IN | 245 | Medium |
| This API (java/io/File.<init>(Ljava/lang/String;)V) reads a file whose location might be specified by user input | SECURITY | PATH_TRAVERSAL_IN | 248 | Medium |
| This API (java/io/File.<init>(Ljava/lang/String;)V) reads a file whose location might be specified by user input | SECURITY | PATH_TRAVERSAL_IN | 226 | Medium |