René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"CX SSRF @ src/main/java/org/cysecurity/cspf/jvl/controller/Install.java [refs/heads/master]","articleBody":"**SSRF** issue exists @ **src/main/java/org/cysecurity/cspf/jvl/controller/Install.java** in branch **refs/heads/master**\r\n\r\n*The application sends a request to a remote server, for some resource, using dburl in src\\main\\java\\org\\cysecurity\\cspf\\jvl\\controller\\Install.java:112. However, an attacker can control the target of the request, by sending a URL or other data in\u0026nbsp;\u0026quot;\u0026quot;dburl\u0026quot;\u0026quot; at src\\main\\java\\org\\cysecurity\\cspf\\jvl\\controller\\Install.java:54.*\r\n\r\nSeverity: Medium\r\n\r\nCWE:918\r\n\r\n[Vulnerability details and guidance](https://cwe.mitre.org/data/definitions/918.html)\r\n\r\n[Checkmarx](https://cxprivatecloud.checkmarx.net/CxWebClient/ViewerMain.aspx?scanid=1007325\u0026projectid=1350\u0026pathid=259)\r\n\r\n[Training](null)\r\n[Recommended Fix](https://cxprivatecloud.checkmarx.net/CxWebClient/ScanQueryDescription.aspx?queryID=4422\u0026queryVersionCode=104071955\u0026queryTitle=SSRF)\r\n\r\nLines: 54 56 57 58 \r\n\r\n---\r\n[Code (Line #54):](null#L54)\r\n```\r\n        dburl = request.getParameter(\"dburl\");\r\n```\r\n---\r\n[Code (Line #56):](null#L56)\r\n```\r\n        dbuser = request.getParameter(\"dbuser\");\r\n```\r\n---\r\n[Code (Line #57):](null#L57)\r\n```\r\n        dbpass = request.getParameter(\"dbpass\");\r\n```\r\n---\r\n[Code (Line #58):](null#L58)\r\n```\r\n        dbname = request.getParameter(\"dbname\");\r\n```\r\n---\r\n","author":{"url":"https://github.com/github-actions[bot]","@type":"Person","name":"github-actions[bot]"},"datePublished":"2022-03-14T18:35:27.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":1},"url":"https://github.com/203/JavaVulnerableLab/issues/203"}