Topic
A web vulnerability class where attackers trick servers into making unintended network requests, often reaching internal or cloud-metadata endpoints.
watchTowr says attackers are already pulling cloud credentials through MLflow's Tracking Server, and VulnCheck logged scanning against a FUXA path traversal a day later.
Perspective Coverage
5 publishersReality
SonicWall confirmed both SMA1000 flaws were exploited before disclosure, and CISA gave federal agencies three days to remediate. The lower-scored console bug is the step that reaches the operating system.
Reality
Trust Boundary's walkthrough of the 2019 Capital One breach puts the weight on the IAM role attached to the firewall instance, and says the OCC consent order that followed does not mention server-side request forgery at all.
Reality
Webhooks, image proxies, link unfurlers and PDF renderers all pass a user's string to an HTTP client that sits inside your private network, where the cloud metadata endpoint answers an unauthenticated GET and hands back IAM credentials.
Reality
AWS fixed an SSRF in SSM Agent 3.3.4851.0. How much the bug actually gave an attacker depends on your IAM layout, and CloudTrail's StartSession records already show who called the vulnerable document.
Reality
The human still taps the security key, and what crosses to the agent is one origin's cookies, normalized and pushed over 127.0.0.1. The identity provider sits on the relay's blocklist, which is the part worth copying.
Reality
F5 Labs logged 69,433 probes at 169.254.169.254 in March 2025 using six ordinary parameter names. Whether any of them mattered was settled at instance launch, before any input validation ever ran.
Reality
A GitHub advisory describes an unauthenticated, full-read SSRF in the default MLflow tracking server that reaches the cloud metadata endpoint and reflects the response back to the caller.
Reality