Description

This detector identifies Flask applications that have insecure user SDK configurations, specifically looking for Flask user input handling that may expose security vulnerabilities. The vulnerability occurs when Flask user SDK configurations are not properly secured, potentially allowing unauthorized access or data exposure.

Detection Strategy

• The detector scans Python Flask applications for user SDK configuration patterns

• It specifically targets Flask-related imports and modules in the codebase

• The scanner looks for Flask user input handling functions that may have insecure configurations

• A vulnerability is reported when Flask user SDK configurations are found that contain potentially unsafe user input handling patterns

• The detection focuses on identifying where Flask user input processing may bypass security controls or validation

Vulnerable code example

import os
from flask import Flask, request
import boto3

app = Flask(__name__)

@app.route("/data")
def get_data():...

✅ Secure code example

import os
from flask import Flask, request, abort
import boto3

app = Flask(__name__)

# Define allowed S3 endpoints
ALLOWED_ENDPOINTS = {...