Server-side request forgery (SSRF) allows an attacker to induce the server-side application to make requests to an unintended location. In a typical SSRF attack, the attacker might cause the server to make a connection to internal- only (or localhost) services within the organization's infrastructure.