SYM_PY_0076 - SymbioticSec/Symbiotic-Vulnerability-Database GitHub Wiki

Cleartext Transmission of Sensitive Information

Property Value
Language python
Severity low
CWE CWE-319: Cleartext Transmission of Sensitive Information
OWASP A03:2017 - Sensitive Data Exposure
Confidence Level Low
Impact Level Low
Likelihood Level Low

Description

The code creates a urllib.request.Request using an 'http://' URL, which means data is sent over an unencrypted connection. This exposes any transmitted information to interception or tampering.

Impact

Using unencrypted HTTP can allow attackers to intercept sensitive data (like credentials or personal info), modify requests, or perform man-in-the-middle attacks. This can compromise user privacy and the integrity of application data.