CX SSRF @ projects/Download_images_from_website/scrap-img.py [master]

[mariana-bteixeira]

SSRF issue exists @ projects/Download_images_from_website/scrap-img.py in branch master

The application sends a request to a remote server, for some resource, using get in projects\Download_images_from_website\scrap-img.py:39. However, an attacker can control the target of the request, by sending a URL or other data in input at projects\Download_images_from_website\scrap-img.py:8.Similarity ID: -919520182

Severity: Medium

CWE:918

Vulnerability details and guidance

Internal Guidance

Checkmarx

Training Recommended Fix

Lines: 8

---

Code (Line #8):

path = input("Enter Path : ")

---

[mariana-bteixeira]

Issue still exists.