Server-Side Request Forgery (SSRF)

Properties

id: d3f:CWE-918

name
Server-Side Request Forgery (SSRF)
definition
The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.
synonyms
SSRF
synonyms
XSPA
json

Neighbors

Inferred Relationships

This page is experimental and may change significantly in future releases.

Related Countermeasure Techniques

No related defensive techniques in this release.

Related Weaknesses

Related Offensive Techniques

No related offensive techniques in this release.