DN FIELD GUIDE · INITIAL RELEASE
Server-side request forgery (SSRF)
A service is induced to fetch a destination it should not access.
Controls · Reviewed 2026-10-12
See it in a workflow
An untrusted URL points at an internal metadata service.
The failure mode
Unrestricted URL fetching can expose internal systems and credentials.
Illustrative scenario, not a measured execution test.
Connect the concepts
Primary documentation
Evidence before authority
DN’s reference hub connects concepts, official sources and practical review questions. It is an editorial reference, not a security certification or legal advice. Entries are dated snapshots, not a continuously monitored feed. Coverage expands only after review.
Commercial relationships do not determine definitions, regulatory conclusions or default tool order. Follow provider eligibility rules and verify permissions before execution.
Suggest a correction · Dictionary JSON · Regulation JSON · Tools JSON