Glossary: Web App Security and Authentication

SSRF

Also written: server-side request forgery

Tricking a server into fetching a URL an attacker chose, such as an internal address only the server can reach. Fetch only from an allowlist of hosts.