Story #15289: POC

[marob]

No description provided.

[vitam-prg]

Checkmarx One – Scan Summary & Details – 12754945-2590-43de-8452-7824a82bdf1f

New Issues (5)

Checkmarx found the following issues in this Pull Request

#	Severity	Issue	Source File / Package	Checkmarx Insight
1		Parameter_Tampering	/api/api-iam/iam/src/main/java/fr/gouv/vitamui/iam/server/discussion/rest/DiscussionController.java: 55	details Method unresolveDiscussion at line 55 of /api/api-iam/iam/src/main/java/fr/gouv/vitamui/iam/server/discussion/rest/DiscussionController.java gets... Attack Vector
2		Parameter_Tampering	/api/api-iam/iam/src/main/java/fr/gouv/vitamui/iam/server/discussion/rest/DiscussionController.java: 45	details Method addMessage at line 45 of /api/api-iam/iam/src/main/java/fr/gouv/vitamui/iam/server/discussion/rest/DiscussionController.java gets user inp... Attack Vector
3		Parameter_Tampering	/api/api-iam/iam/src/main/java/fr/gouv/vitamui/iam/server/discussion/rest/DiscussionController.java: 50	details Method resolveDiscussion at line 50 of /api/api-iam/iam/src/main/java/fr/gouv/vitamui/iam/server/discussion/rest/DiscussionController.java gets u... Attack Vector
4		Parameter_Tampering	/api/api-iam/iam/src/main/java/fr/gouv/vitamui/iam/server/discussion/rest/DiscussionController.java: 45	details Method addMessage at line 45 of /api/api-iam/iam/src/main/java/fr/gouv/vitamui/iam/server/discussion/rest/DiscussionController.java gets user inp... Attack Vector
5		Parameter_Tampering	/api/api-iam/iam/src/main/java/fr/gouv/vitamui/iam/server/discussion/rest/DiscussionController.java: 40	details Method createDiscussion at line 40 of /api/api-iam/iam/src/main/java/fr/gouv/vitamui/iam/server/discussion/rest/DiscussionController.java gets us... Attack Vector

Fixed Issues (3)

Great job! The following issues were fixed in this Pull Request

Severity	Issue	Source File / Package
	CVE-2026-25639	Npm-axios-1.13.4
	CVE-2025-68157	Npm-webpack-5.98.0
	CVE-2025-68458	Npm-webpack-5.98.0

---

Use @Checkmarx to interact with Checkmarx PR Assistant.
Examples:
@Checkmarx how are you able to help me?
@Checkmarx rescan this PR