#webhooks

Server-side request forgery through user-configurable webhooks

Webhook features let users tell your server where to send requests, a natural home for SSRF. How the flaw arises and how to constrain outbound requests.