[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"framework:owasp\u002Ftop10-2021-a10":3},{"item":4,"lessons":16,"controls":26,"related":48},{"family":5,"item":6,"code":7,"title":8,"citations":9,"publisher":10,"summary_md":11,"official_text":12,"official_attribution":12,"official_url":13,"link_label":14,"note":12,"updated_at":15},"owasp","top10-2021-a10","A10:2021","A10:2021 Server-Side Request Forgery (SSRF)",2,"OWASP Foundation","**What it asks for.** This category covers flaws where a web application fetches a remote resource based on a URL supplied by the user without validating it. An attacker can then make the server send requests to internal systems, cloud metadata services or other destinations that should not be reachable.\n\n**In practice.** Strong defences combine network and application controls. At the network layer, the components that make outbound requests are segmented and restricted with deny-by-default egress rules. In the application, user-supplied URLs are validated against an allow list of schemes, hosts and ports, redirects are not followed blindly, and raw responses are not returned to the client. Cloud instance metadata services are hardened, for example by requiring session tokens. Evidence includes code review findings, security tests covering SSRF payloads and documented egress rules.\n\n**Common gaps.** Teams often rely on deny lists or regular expressions that can be bypassed with alternative IP encodings, DNS rebinding or redirects. Webhooks, file importers and URL preview features are frequently overlooked.",null,"https:\u002F\u002Fowasp.org\u002FTop10\u002FA10_2021-Server-Side_Request_Forgery_%28SSRF%29\u002F","Read it at OWASP","2026-10-18T15:18:43.664+00:00",{"total":9,"list":17},[18,22],{"slug":19,"title":20,"published_at":21},"active-mlflow-ssrf-exploit-highlights-urgent-patch-prioritization-need","Active MLflow SSRF Exploit Highlights Urgent Patch Prioritization Need","2026-08-19T20:21:24.06+00:00",{"slug":23,"title":24,"published_at":25},"critical-ssrf-flaw-in-ohif-dicom-viewer-exposes-clinician-tokens","Critical SSRF Flaw in OHIF DICOM Viewer Exposes Clinician Tokens","2026-06-25T18:20:56.592+00:00",[27,31,36,40,44],{"slug":28,"name":29,"problem":30,"stories":9},"patch-management","Automated patch management","Known holes get closed in days, not months.",{"slug":32,"name":33,"problem":34,"stories":35},"identity-threat-detection","Identity threat detection and response (ITDR)","Attackers who log in with real, stolen credentials get noticed.",1,{"slug":37,"name":38,"problem":39,"stories":35},"network-segmentation","Network segmentation and microsegmentation","One compromised machine can no longer reach everything else.",{"slug":41,"name":42,"problem":43,"stories":35},"threat-intelligence","Threat intelligence","Attack campaigns reach your sector, suppliers or software before your team hears about them.",{"slug":45,"name":46,"problem":47,"stories":35},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[49,54,58,63,67,71,76,81],{"family":50,"item":51,"code":52,"title":53,"together":9},"nist-800-53","sc-7","SC-7","Boundary Protection",{"family":50,"item":55,"code":56,"title":57,"together":9},"si-2","SI-2","Flaw Remediation",{"family":59,"item":60,"code":61,"title":62,"together":9},"cis","7","Control 7","Continuous Vulnerability Management",{"family":59,"item":64,"code":65,"title":66,"together":9},"12","Control 12","Network Infrastructure Management",{"family":50,"item":68,"code":69,"title":70,"together":35},"ac-17","AC-17","Remote Access",{"family":72,"item":73,"code":74,"title":75,"together":35},"nist-csf","id-ra","ID.RA-1","Risk Assessment",{"family":77,"item":78,"code":79,"title":80,"together":35},"nist-sp","800-40","SP 800-40","SP 800-40 Rev. 4: Guide to Enterprise Patch Management Planning: Preventive Maintenance for Technology",{"family":82,"item":83,"code":84,"title":85,"together":35},"cisa","bod-22-01","BOD 22-01","BOD 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities"]