Vulnerabilities Dashboard - Code

[mantel-group-nullify]

Severity Threshold: 🔵 MEDIUM

1 Potential vulnerability sources found within this repo

🔴 CRITICAL	🟡 HIGH	🔵 MEDIUM	⚪ LOW
0	0	1	0

ID: 01J64RPASZX8ZMDZGRCPMN8EAG Language: Python Severity: 🔵 MEDIUM CWE-400

Uncontrolled Resource Consumption

The application is using the requests module without setting a timeout for connections. This could lead to uncontrolled resource consumption if the external services (like the plate recognition API) are slow to respond or unresponsive. In a worst-case scenario, this could cause the entire gate control system to become unresponsive, leading to a Denial of Service.
Read more:
https://cwe.mitre.org/data/definitions/400.html

gate-controller/check-plate-and-open-gate.py

Lines 168 to 172 in 68a2a2e

	response = requests.post(
	'https://api.platerecognizer.com/v1/plate-reader/',
	data=dict(regions=regions), # Optional
	files=dict(upload=fp),
	headers={'Authorization': f'Token {plate_recognizer_token}'})

Reply with /nullify to interact with me like another developer