SpotBugs Bug Detector Report

The following document contains the results of SpotBugs

SpotBugs Version is 4.8.6

Threshold is medium

Effort is default

Summary

Classes Bugs Errors Missing Classes
15 7 0 2

Files

Class Bugs
de.aikiit.mailversendala.MailConfig 1
de.aikiit.mailversendala.Mailversendala 1
de.aikiit.mailversendala.SendOut 1
de.aikiit.mailversendala.template.FileMailTemplate 4

de.aikiit.mailversendala.MailConfig

Bug Category Details Line Priority
Exception thrown in class de.aikiit.mailversendala.MailConfig at new de.aikiit.mailversendala.MailConfig() will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. BAD_PRACTICE CT_CONSTRUCTOR_THROW 37 Medium

de.aikiit.mailversendala.Mailversendala

Bug Category Details Line Priority
This API (java/io/File.<init>(Ljava/lang/String;)V) reads a file whose location might be specified by user input SECURITY PATH_TRAVERSAL_IN 41 Medium

de.aikiit.mailversendala.SendOut

Bug Category Details Line Priority
new de.aikiit.mailversendala.SendOut(Mailing) may expose internal representation by storing an externally mutable object into SendOut.recipient MALICIOUS_CODE EI_EXPOSE_REP2 36 Medium

de.aikiit.mailversendala.template.FileMailTemplate

Bug Category Details Line Priority
Exception thrown in class de.aikiit.mailversendala.template.FileMailTemplate at new de.aikiit.mailversendala.template.FileMailTemplate(MailConfig) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. BAD_PRACTICE CT_CONSTRUCTOR_THROW 39 Medium
Exception thrown in class de.aikiit.mailversendala.template.FileMailTemplate at new de.aikiit.mailversendala.template.FileMailTemplate(InputStream, InputStream) will leave the constructor. The object under construction remains partially initialized and may be vulnerable to Finalizer attacks. BAD_PRACTICE CT_CONSTRUCTOR_THROW 29 Medium
This API (java/nio/file/Paths.get(Ljava/lang/String;[Ljava/lang/String;)Ljava/nio/file/Path;) reads a file whose location might be specified by user input SECURITY PATH_TRAVERSAL_IN 39 Medium
This API (java/nio/file/Paths.get(Ljava/lang/String;[Ljava/lang/String;)Ljava/nio/file/Path;) reads a file whose location might be specified by user input SECURITY PATH_TRAVERSAL_IN 40 Medium