SSRF — When a Server Makes the Wrong Call

TL;DR What: SSRF happens when an application lets a user supply a URL, and the server fetches it. Why it’s bad: The server sits inside a trusted network, so it can be tricked into calling localhost or internal services you can’t reach from the inte...