Unverified50% confidenceFactExact time
The most dangerous target of SSRF (Server-Side Request Forgery) in cloud environments is the IMDS instance metadata service, with AWS's IMDS address being 169.254.169.254.
1
Sources
50%
Confidence
Long-term
Relevance
10/7/2026
First Seen
Sources
Related Entities
Related Claims
VerifiedVulnerabilities such as SQL injection, XSS, and SSRF have long occupied the OWASP Top 10 security risk list.61% similarUnverifiedSSRF is a class of web security vulnerability in which an attacker manipulates a server-side application into making HTTP requests to unintended internal or external addresses.61% similarUnverified2021年曝光的QNAP NAS勒索软件事件（eCh0raix/QNAPCrypt）中，攻击者利用暴露在公网的管理界面实施攻击，感染量超过数万台61% similarUnverifiedKubernetes的默认配置往往授予Pod过多权限，使得云原生渗透路径（IMDS凭证获取到服务账户横向移动）频繁出现在真实攻击中60% similarUnverifiedStored XSS has long held an important position in the OWASP Top 10 security risk list.60% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/985173API
curl https://kongchang.com/api/v1/knowledge/claims/985173MCP
get_claim(id=985173)