Check logs Sprint 12.4 week 2

[fecjjeng]

Check logs Sprint 12.4 week 2

• Log review needs to be completed for sprint 12.4 week 2 per the Security Event Review Checklist (https://github.com/fecgov/FEC/wiki/Security-Event-Review-Checklist)

• Create check logs tickets for the next sprint

[hcaofec]

Vulnerabilities:

FEC-CMS: Total 4
package.json: 3
2 Medium: Cross-site Scripting: fecgov/fec-cms#3698
1 Medium: Prototype Pollution: fecgov/fec-cms#3740

requirements.txt: 1
1 Medium: Timing Attack in wagtail@2.7.2: fecgov/fec-cms#3777

openFEC: Total 1
package.json: 1
Medium: Prototype Pollution #4337
requirements.txt: 0

FEC-EREGS: Total 2
package.json: 2
2 Medium: Cross-site Scripting: fecgov/fec-eregs#487
requirements.txt: 0

FEC-PATTERN-LIBRARY: Total 2
package.json: 2
2 Medium: Cross-site Scripting : fecgov/fec-pattern-library#155

Cloud.gov Dashboard: 9 deployer accounts, same as last week.
Offboarding: Nothing to report