STIGQter STIGQter: STIG Summary: Application Programming Interface (API) Security Requirements Guide Version: 1 Release: 1 Benchmark Date: 11 Sep 2025:

The API must encode outputs.

DISA Rule

SV-274767r1143805_rule

Vulnerability Number

V-274767

Group Title

SRG-APP-000516

Rule Version

SRG-APP-000516-API-001295

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

Build or configure the API to encode outputs.

Check Contents

Verify the API encodes outputs.

If the API does not encode outputs, this is a finding.

Vulnerability Number

V-274767

Documentable

False

Rule Version

SRG-APP-000516-API-001295

Severity Override Guidance

Verify the API encodes outputs.

If the API does not encode outputs, this is a finding.

Check Content Reference

M

Target Key

5703