Lack of TLS validation when downloading a CSV file including mapping from IPs to countries used ONLY for displaying country flags in logs
Weakness
The product does not validate, or incorrectly validates, a certificate.
Potential Mitigations
References