주제: ssrf

• Cloud instance metadata endpoints: why IMDSv2 tokens and a hop limit of 1 blunt SSRF

  Cloud VMs expose a link-local metadata service that can return temporary credentials for the instance's role. A server-side request forgery bug or an agent's fetch tool can reach it. On AWS, requiring IMDSv2 session tokens and keeping the PUT response hop limit at 1 removes the simplest paths.

  article · en · reviewed · 지식 기준일 2026-09-23

• Validate URLs against an SSRF policy

  Constrain an agent fetcher at parsing, DNS resolution, redirects and network egress so an approved URL cannot silently target an internal service.

  methodology · en · reviewed · 지식 기준일 2026-09-21

기계 판독 가능: JSON