Glossary: Application and Credential Attacks, and AI Risks

server-side request forgery (SSRF)

Also written: SSRF

An attack that tricks a server into fetching an address the attacker chose, usually an internal one that firewalls trust because the request comes from inside. A common target is the cloud metadata service at 169.254.169.254: an image import page made to fetch it can hand out the server's cloud credentials.