CWE-918
Server-Side Request Forgery (SSRF)
AI Translation Available
The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.
Status
incomplete
Abstraction
base
Affected Platforms
AI/ML
Web Server
Technical Details
AI Translation
Common Consequences
confidentiality
integrity
access control
Impacts
read application data
execute unauthorized code or commands
bypass protection mechanism
Detection Methods
automated static analysis