Conversation
![prisma-cloud-devsecops[bot]](https://avatars.githubusercontent.com/in/135857?s=60&v=4){kind=small}
| @app.route("/tainted7/<something>") | ||
| def test_sources_7(something): | ||
|
|
||
| os.system(request.remote_addr) |
There was a problem hiding this comment.
Unsanitized input from data from a remote resource flows into os.system
File: example.py | Checkov ID: CKV3_SAST_48
Description
CWE: CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
OWASP: A03:2021-Injection
This policy detects when unsanitized input from a remote resource is used as a command in os.system in Python code, which can lead to a Command Injection vulnerability.
Vulnerable code example:
import os
data = request.args.get("input")
os.system(data)The above code is vulnerable because it takes user input from the request.args.get() function and directly passes it to os.system, without any sanitization or validation. An attacker can manipulate the input to execute arbitrary commands on the underlying system.
| import os | ||
| from flask import Flask, request | ||
| import bleach | ||
| app = Flask(__name__) |
There was a problem hiding this comment.
CSRF protections disabled
File: example.py | Checkov ID: CKV3_SAST_56
Description
CWE: CWE-352: Cross-Site Request Forgery (CSRF)
OWASP: A01:2021-Broken Access Control
Cross-Site Request Forgery (CSRF) is an attack that forces a victim to execute unwanted actions on a web application they are authenticated with. By disabling CSRF protections, applications expose themselves to a serious security risk. This policy has identified instances where CSRF protections are disabled or not correctly implemented.
When CSRF protections are disabled, it can lead to:
- Unauthorized actions performed on behalf of an authenticated user.
- Data breaches.
- Account hijacking.
- Exploitation of the trust a user has with a specific site.
In the analyzed codebase, instances were detected where the CSRF protections were explicitly turned off. Such configurations increase the application's vulnerability to CSRF attacks.
For example, avoiding practices like:
# Disabling CSRF protection in Flask-WTF
class MyForm(flask_wtf.FlaskForm):
class Meta:
csrf = False1 participant
No description provided.