SSRF

Also written: server-side request forgery

An attack in which a forged host name makes your server fetch from somewhere it shouldn't. Allowed hosts guard against it.