172.20.170.28 at 11:23, 12 June 2026

2026-06-12T11:23:45Z

← Older revision		Revision as of 16:53, 12 June 2026
Line 43:		Line 43:
	\| Medium		\| Medium
	\| Patched		\| Patched
	\| ~~HTTPS~~ enforced across the application. Credentials are transmitted only over TLS.		\| HTTPSdddd enforced across the application. Credentials are transmitted only over TLS.
	\|-		\|-
	\| 2		\| 2

Bjsbot: BJS: create Draft from MAIN for submission 226

2026-06-12T11:23:38Z

BJS: create Draft from MAIN for submission 226

New page

{{DISPLAYTITLE:fguy}}
{| class="infobox" style="float:right; clear:right; width:300px; max-width:300px; margin:0 0 1em 1em; border:1px solid #a2a9b1; background:#f8f9fa; font-size:90%; table-layout:fixed;"
|-
! style="text-align:left; width:35%;" | Title
| fguy
|-
! style="text-align:left;" | Author(s)
| geeta
|-
! style="text-align:left;" | Platform
| Bharatiya Jnana Sarita
|-
! style="text-align:left;" | Categories
| Contemporary Social/Cultural Sciences
|-
! style="text-align:left;" | Year
| 2026
|-
! style="text-align:left;" | Type of Article
| Original Article - Long Form
|-
! style="text-align:left;" | Difficulty Level
| Beginner
|-
! style="text-align:left;" | Abstract
| uy8u9
|}

<span id="security-audit-remediation-report-pravaha.info"></span>

= Security Audit Remediation Report – Pravaha.info =

{| class="wikitable"
|-
! S. No.
! Vulnerability
! Risk
! Status
! Remediation / Response
|-
| 1
| Web Server Transmits Cleartext Credentials
| Medium
| Patched
| HTTPS enforced across the application. Credentials are transmitted only over TLS.
|-
| 2
| Missing Security Headers
| Medium
| Patched
| Required security headers implemented at the web server level.
|-
| 3
| Dependency on Vulnerable Third-Party Component (Plupload)
| Medium
| Risk Managed
| Bundled with OJS 3.3.0-21. Direct replacement could impact submission and editorial workflows; remediation deferred to supported platform upgrade.
|-
| 4
| Dependency on Vulnerable Third-Party Component (jQuery Validation)
| Medium
| Risk Managed
| Bundled with OJS 3.3.0-21. Independent replacement requires platform-level validation; remediation deferred to supported upgrade.
|-
| 5
| Dependency on Vulnerable Third-Party Component (Vue.js)
| Medium
| Risk Managed
| Embedded in vendor-supplied compiled assets. Safe replacement cannot be validated without supported build environment.
|-
| 6
| Weak Password Policy
| Medium
| Patched
| Strong password requirements implemented for password creation and reset.
|-
| 7
| No Rate Limit (Lost Password)
| Medium
| Patched
| Rate limiting implemented on password recovery endpoint.
|-
| 8
| No Rate Limit (Sign In)
| Medium
| Patched
| Rate limiting implemented on authentication endpoint.
|-
| 9
| Information Disclosure in Responses (Private IP)
| Low
| Patched
| Internal IP address information removed from application responses.
|}

<span id="summary"></span>

== Summary ==

Patched Findings: 6

Risk Managed Findings: 3

Total Findings: 9

----

'''Word Count:''' 301

Draft:Fguy - Revision history

172.20.170.28 at 11:23, 12 June 2026

Bjsbot: BJS: create Draft from MAIN for submission 226