Description
Server-Side Request Forgery (SSRF) vulnerability allows an attacker to perform local and/or remote network requests while impersonating the target server. Using this vulnerability, Invicti was able to access the target's localhost service.
Remediation
Properly sanitize user input.