Server-Side Request Forgery

ID: VUL-009 • Severity: High • Category: Server

Vulnerability Details

Identifiers

ID:
VUL-009
CWE:
CWE-918
CVSS:
8.2

Classification

Severity:
High
Status:
Open
Category:
Server
False Positive:7.0%

Location

File:src/services/external-api.js
Line:27

Description

The application makes HTTP requests to URLs specified by users without proper validation, which could be exploited to access internal resources.

Timeline

Detected:Dec 23, 2023, 9:45 AM
Risk Assessment
Calculated risk score and contributing factors

Overall Risk Score

10.0/10

Critical risk - immediate remediation recommended

Contributing Factors

Severity8/10

High severity vulnerabilities can significantly impact security

Exploitability4/10

Server vulnerabilities are less commonly exploited

False Positive Likelihood9/10

7% chance this is a false positive

Vulnerable Code
22async function fetchExternalData(url) {
23  const response = await fetch(url);
24  return response.json();
25}
AI Fix Suggestions
Let AI generate multiple fix suggestions for this vulnerability

Generate AI Fix Suggestions

Our AI can analyze this vulnerability and suggest multiple approaches to fix it, tailored to your codebase and security requirements.