intermediatetermWeb foundationsWeb foundations / Security / SSRF
IntermediateNot yet reviewed

SSRF

Server-Side Request Forgery: an attack where a web application is coaxed into sending crafted requests to unexpected locations.

Definition

Server-Side Request Forgery: an attack where a web application is coaxed into sending crafted requests to unexpected locations.

Use case

Preventing user URL inputs from resolving internal AWS metadata endpoints (169.254.169.254).

Related terms

Articles

Server-side request forgery

OWASP · Article · link checked 2026-10-16

Tricking a server into calling internal addresses on your behalf.

Suggest a change