Vulnerability library
Security checkMarch 30, 2026

Possible Server-Side Request Forgery

Understand the exposure, see the recommended fix, and check whether your own website has related weaknesses.

High severitySSRFInjectionAccess Control

Check your website

Find this and other vulnerabilities with a free scan.

Your scan runs on your computer. No account required.

Description

A Possible Server-Side Request Forgery (SSRF) vulnerability occurs when a server appears to make outbound requests based on user-supplied input. Indicators such as response delays or unusual behavior suggest the server may be attempting to access internal or external resources.

Recommendation

To reduce the risk of SSRF, validate and restrict all outbound requests to trusted destinations using an allow list. Avoid using user input directly in request URLs. Implement network controls to block access to internal IP ranges and metadata services, and monitor for unusual outbound traffic patterns.

References

Could your website be exposed too?

SmartScanner can check your website for Possible Server-Side Request Forgery and gives you actionable findings to investigate.

Start a free scan

Related Issues

You might also like:

Exploiting Server Version Disclosure

How do hackers hack websites?

These 7 PHP mistakes leave your website open to the hackers

See something that needs correcting? Let us knowUpdated March 30, 2026