Server-Side Request Forgery (SSRF) is a cybersecurity threat where attackers manipulate servers to make unauthorized requests, potentially exposing sensitive internal systems.
Attackers trick servers into making requests on their behalf, gaining access to internal resources or bypassing authentication protocols.
SSRF attacks include accessing internal systems, bypassing authentication, and blind SSRF where attackers don't directly see the response.
Preventive measures include using whitelists for URLs, enforcing authentication, segmenting networks, and monitoring outbound requests to mitigate SSRF vulnerabilities.