Checkmarx Scan (Learning)
FieloELR v1.103 scanned on 29 August 2025
Fielo conducts an internal security review on every major release using a code scanning tool powered by Checkmarx.
The process goes like this: the scan identifies potential vulnerabilities and for each one, we either address the issue or document it as a false positive.
Results
FieloELR contains 179 Apex classes across 13 custom objects.
All of them were scanned for security. Here is the final report:
| Query | Group | Issues | False Positives | Rectifications |
|---|---|---|---|---|
| Disallowed Password APIs | Apex Critical Security Risk | No issues found | – | – |
| SOQL SOSL Injection | Apex Critical Security Risk | 16 | 12 | 4 |
| Stored XSS | Apex Critical Security Risk | No issues found | – | – |
| Lightning API Version | Apex Critical Security Risk | No issues found | – | – |
| Reflected XSS | Apex Critical Security Risk | No issues found | – | – |
| Sharing | Apex Serious Security Risk | 58 | 58 | – |
| FLS Create | Apex Serious Security Risk | 11 | 11 | – |
| FLS Update | Apex Serious Security Risk | 3 | 3 | – |
| CRUD Delete | Apex Serious Security Risk | 5 | 5 | – |
| URL Redirection Attack | Apex Serious Security Risk | No issues found | – | – |
| XSRF | Apex Serious Security Risk | No issues found | – | – |
| Client DOM Stored Code Injection | JavaScript High Risk | No issues found | – | – |
| Client DOM Code Injection | JavaScript High Risk | No issues found | – | – |
| Client DOM Stored XSS | JavaScript High Risk | No issues found | – | – |
| Client DOM XSS | JavaScript High Risk | No issues found | – | – |
| Client Overly Permissive Message Posting | JavaScript Low Visibility | No issues found | – | – |
Updated about 1 year ago
Did this page help you?