File tree Expand file tree Collapse file tree 1 file changed +5
-8
lines changed
rust/ql/src/queries/security/CWE-918 Expand file tree Collapse file tree 1 file changed +5
-8
lines changed Original file line number Diff line number Diff line change @@ -10,14 +10,11 @@ input can facilitate server-side request forgery (SSRF) attacks. In these
1010attacks, the server may be tricked into making a request to an unintended API
1111endpoint or resource.
1212
13- If the server performing the request is connected to an internal network, this
14- can give an attacker the means to bypass the network boundary and make requests
15- against internal services.
16-
17- A forged request may perform an unintended action on behalf of the attacker, or
18- cause information leak if redirected to an external server or if the request
19- response is fed back to the user. It may also compromise the server making the
20- request, if the request response is handled in an unsafe way.
13+ If the server is connected to an internal network, attackers can bypass security
14+ boundaries to target internal services.
15+
16+ Forged requests can execute unintended actions, leak data if redirected to an
17+ external server, or compromise the server if responses are handled insecurely.
2118</p >
2219</overview >
2320
You can’t perform that action at this time.
0 commit comments