Cleartext Transmission of Sensitive Information
| Property | |
|---|---|
| Language |  |
| Severity |  |
| CWE | CWE-319: Cleartext Transmission of Sensitive Information |
| OWASP | A03:2017 - Sensitive Data Exposure |
| Confidence Level | Medium |
| Impact Level | Medium |
| Likelihood Level | Low |
Description#
The code is making network requests using HTTP instead of HTTPS, which means data sent and received is not encrypted. This exposes sensitive information to anyone who can intercept the network traffic.
Impact#
Attackers on the same network could eavesdrop on or tamper with data being transmitted, potentially stealing credentials, personal data, or injecting malicious content. This can lead to data breaches, compromised user accounts, and loss of user trust.