All rules →
Rules / Python
SHIELD-PY-007

Server-Side Request Forgery (SSRF) via requests with user input

highPythonCWE-918CVSS 8.6

What it detects

Making HTTP requests to user-controlled URLs may allow SSRF.

How to fix

Validate and allowlist URLs before making outbound HTTP requests.

Scan your repo freeFull documentation
Back to all rules
SHIELD-PY-007: Server-Side Request Forgery (SSRF) via requests with user input — Zennoxa Shield