SSRF (Server-Side Request Forgery)

Attack that tricks the server into making requests to internal or external systems from its own network position. SSRF often leads to exposure of cloud metadata (AWS IMDS), internal services, or databases. Common in features that accept user-supplied URLs (webhooks, image previews, exports).