Skip to content

Commit 50bdc65

Browse files
committed
Rust: Apply documentation tweaks
1 parent b456a8c commit 50bdc65

File tree

1 file changed

+5
-8
lines changed

1 file changed

+5
-8
lines changed

rust/ql/src/queries/security/CWE-918/RequestForgery.qhelp

Lines changed: 5 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -10,14 +10,11 @@ input can facilitate server-side request forgery (SSRF) attacks. In these
1010
attacks, the server may be tricked into making a request to an unintended API
1111
endpoint or resource.
1212

13-
If the server performing the request is connected to an internal network, this
14-
can give an attacker the means to bypass the network boundary and make requests
15-
against internal services.
16-
17-
A forged request may perform an unintended action on behalf of the attacker, or
18-
cause information leak if redirected to an external server or if the request
19-
response is fed back to the user. It may also compromise the server making the
20-
request, if the request response is handled in an unsafe way.
13+
If the server is connected to an internal network, attackers can bypass security
14+
boundaries to target internal services.
15+
16+
Forged requests can execute unintended actions, leak data if redirected to an
17+
external server, or compromise the server if responses are handled insecurely.
2118
</p>
2219
</overview>
2320

0 commit comments

Comments
 (0)