jiveshkalra / SecureHack-Quest-TechBuzz

1 stars 16 forks source link

No Rate Limiting on APIs #115

Open starkgazer1729 opened 1 month ago

starkgazer1729 commented 1 month ago

Description of the Vulnerability

server.py

line 72 - 173

APIs do not have rate limiting implemented, which can lead to abuse and brute-force attacks. Attackers could overwhelm the system with requests.

Screen Shot of the Vulnerable Code

not uploading

Impact of the vulnerability

4/5

Recommended Steps to resolve it?

Implement rate limiting for your API endpoints to mitigate abuse. Flask-Limiter is a useful extension for this purpose.

School Name

BLUE BELLS MODEL SCHOOL

starkgazer1729 commented 1 month ago

this is atleast a medium severity as per me not low because hackers can abuse force attacking leading to load on server because it will create huge spam requests