MetaCredo.Check.Security.SSRFVulnerability (MetaCredo v0.1.0)

View Source

Detects potential Server-Side Request Forgery (SSRF) vulnerabilities (CWE-918).

Identifies code patterns where user-controlled input is used to construct URLs that are then fetched by the server, potentially allowing attackers to access internal resources or cloud metadata endpoints.

Category: Security / Priority: higher