forked from JoyChou93/java-sec-code
-
Notifications
You must be signed in to change notification settings - Fork 0
Open
Labels
Mend: code security findingsCode security findings detected by MendCode security findings detected by Mend
Description
Code Security Finding
This finding was first detected on 2024-02-07 06:59pm GMT and is still present in the last scan performed on 2024-02-07 06:58pm GMT:
Severity | Vulnerability Type | CWE | File | Data Flows | ||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
Server Side Request Forgery | 2 | |||||||||||||||
|
public static String URLConnection(String url) { | |
try { | |
URL u = new URL(url); | |
URLConnection urlConnection = u.openConnection(); |
2 Data Flow/s detected
View Data Flow 1
View Data Flow 2
Secure Code Warrior Training Material
● Training
▪ Secure Code Warrior Server Side Request Forgery Training
● Videos
🏴 Suppress Finding
- ... as False Alarm
- ... as Acceptable Risk
Metadata
Metadata
Assignees
Labels
Mend: code security findingsCode security findings detected by MendCode security findings detected by Mend