Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Code Security Finding: Server Side Request Forgery (CWE-918, High Severity) in HttpUtils.java:95 #69

@joshn-whitesource-app

Description

@joshn-whitesource-app

Code Security Finding

This finding was first detected on 2024-02-07 06:59pm GMT and is still present in the last scan performed on 2024-02-07 06:58pm GMT:

SeverityVulnerability TypeCWEFileData Flows
HighServer Side Request Forgery

CWE-918

HttpUtils.java:95

2
Vulnerable Code

public static String URLConnection(String url) {
try {
URL u = new URL(url);
URLConnection urlConnection = u.openConnection();

2 Data Flow/s detected
View Data Flow 1
View Data Flow 2
Secure Code Warrior Training Material

● Training

   ▪ Secure Code Warrior Server Side Request Forgery Training

● Videos

   ▪ Secure Code Warrior Server Side Request Forgery Video

🏴 Suppress Finding
  • ... as False Alarm
  • ... as Acceptable Risk

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions