CX SSRF @ projects/Geocoding/geocoding.py [master]

[mariana-bteixeira]

SSRF issue exists @ projects/Geocoding/geocoding.py in branch master

The application sends a request to a remote server, for some resource, using get in projects\Geocoding\geocoding.py:18. However, an attacker can control the target of the request, by sending a URL or other data in input at projects\Geocoding\geocoding.py:6.Similarity ID: 795374525

Severity: Medium

CWE:918

Vulnerability details and guidance

Internal Guidance

Checkmarx

Training Recommended Fix

Lines: 6

---

Code (Line #6):

address = input("Input the address: ")

---

[mariana-bteixeira]

Issue still exists.