Check logs Sprint 12.2 week 2

[pkfec]

Check logs Sprint 12.2 week 2

• Log review needs to be completed for sprint 12.2 week 2 per the Security Event Review Checklist (https://github.com/fecgov/FEC/wiki/Security-Event-Review-Checklist)

• Create check logs tickets for the next sprint

[fecjjeng]

Vulnerabilities:

FEC-CMS: Total 1
package.json: 1
Medium: Cross-site Scripting: fecgov/fec-cms#3698

openFEC: Total 1
requirements.txt: 1
High: Cross-Site Request Forgery (CSRF): #4282

FEC-EREGS: Total 2
package.json: 1
Medium: Cross-site Scripting: fecgov/fec-eregs#487
requirements.txt: 1
High: Cross-Site Request Forgery (CSRF): fecgov/fec-eregs#485

FEC-PATTERN-LIBRARY: Total 1
package.json: 1
Medium: Cross-site Scripting : fecgov/fec-pattern-library#155

Wagtail user account update checks in Kibana logs:
On 04/21/2020: User change: username dgarr by instance dgarr
On 04/27/2020: User change: username jculmer by instance jculmer

check cloud.gov users: Cloud.gov Dashboard: 9 deployer accounts, same as last week.
Offboarding: Nothing to report

[fecjjeng]

Check logs tickets for the next sprint created:
Check logs Sprint 12.3 week 1 #4324
Check logs Sprint 12.3 week 2 #4325