Server-Side Request Forgery
A vulnerability in which attacker-controlled input causes a server to issue requests to unintended internal, local, or privileged network targets.
Technical Context
SSRF defenses require more than URL string filtering. Destination resolution, redirects, alternate IP encodings, DNS rebinding, cloud metadata endpoints, protocol schemes, outbound network policy, and proxy behavior all belong to the trust boundary.
Related Concepts
- egress filtering
- DNS rebinding
- cloud metadata
- input validation