Resolution for the CW challenge technical assessment.
- Create new repository with vulnerable code.
- Configure and enable Dependabot
- Create script to get Dependabot alerts.
- Display alerts on friendly way.
- Integrate Dependabot with Discord.
- Integrate Dependabot with Github Actions.
The application is a API to get prices of cryptocurrencys and renderize the prices with EJS.
To use the API, send a GET request to /crypto/?currency=CURRENCY and get the price.
The vulnerability of application is an Server Side Template Injection (based on CVE-2022-29078) that happens when the API can't find the currency.