Exam 312-50v11 topic 1 question 223 discussion

B. Server-side request forgery (SSRF) attack - ... server-side requests are initiated to obtain information from an external resource and feed it into an application. For instance, a designer can utilize a URL such as https://xyz.com/feed.php ?url=externalsite.com/feed/to to obtain a remote feed. If attackers can alter the URL input to the localhost, then they can view all the local resources on the server. This is how SSRF vulnerabilities evolve ... CEH Module 13 Page 1626

Server-Side Request Forgery (SSRF) Attack Attackers exploit SSRF vulnerabilities in a public web server to send crafted requests to the internal or back end servers that are protected by a firewall.A designer can utilize a URL such as https://xyz.com/feed.php?url=externalsite.com/feed/to to obtain a remote feed. If attackers can alter the URL input to the localhost, then they can view all the local resources on the server. This is how SSRF vulnerabilities evolve.Once the attack is successfully performed, the attackers can perform various activities such as port scanning, network scanning, IP address discovery, reading web server files, and bypassing host-based authentication. (P.1642/1626)

correct