ORCIDGitHubLinkedIn
RSS Curriculum Vitae TR

Server-Side Request Forgery

Turkish equivalent: sunucu tarafı istek sahteciliğiDomain: Cybersecurity

Server-Side Request Forgery — A vulnerability in which attacker-controlled input causes a server to issue requests to unintended internal, local, or privileged network targets.

Cybersecurity Context

SSRF defenses require more than URL string filtering. Destination resolution, redirects, alternate IP encodings, DNS rebinding, cloud metadata endpoints, protocol schemes, outbound network policy, and proxy behavior all belong to the trust boundary.

  • egress filtering
  • DNS rebinding
  • cloud metadata
  • input validation

Updated:

Related concepts

Cybersecurity