.
performing unintended actions. The attacker can craft a malicious request with a URL or IP address that points to an internal system that should not be accessible from the outside, such as a database server, network appliance or backend application. Types of SSRF Vulnerabilities 1. Basic SSRF Basic