Server-Side Request Forgery (API7:2023) - OWASP API Security Top 10

Server-Side Request Forgery is a vulnerability that occurs when an API makes calls to other services, such as file storage or external resources. This vulnerability allows an attacker to manipulate the API’s requests and gain unauthorized access to internal corporate network resources that are typically protected behind a firewall.