Code Security Finding

This finding was first detected on 2024-02-07 06:59pm GMT and is still present in the last scan performed on 2024-02-07 06:58pm GMT:

Severity	Vulnerability Type	CWE	File	Data Flows
High	Server Side Request Forgery	CWE-918	HttpServiceImpl.java:41	1
Vulnerable Code java-sec-code/src/main/java/org/joychou/impl/HttpServiceImpl.java Lines 36 to 41 in 5c68d09 * Redirects: Disable followRedirects.<p> * User-Agent: Java/1.8.0_102 <p> */ public String RequestHttpBanRedirects(String url, HttpHeaders headers) { HttpEntity<String> entity = new HttpEntity<>(headers); ResponseEntity<String> re = restTemplateBanRedirects.exchange(url, HttpMethod.GET, entity, String.class); 1 Data Flow/s detected Secure Code Warrior Training Material ● Training    ▪ Secure Code Warrior Server Side Request Forgery Training ● Videos    ▪ Secure Code Warrior Server Side Request Forgery Video 🏴 Suppress Finding ... as False Alarm ... as Acceptable Risk