SSRF
SSRF After getting access to the environment and finding a cloud container doing a basic enumeration, I discovered it is vulnerable to SSRF. Notice in image 1-1 a directory named metadata-db possibly has sensitive information stored there. Figure 1-1 In figure 1-2 there’s a directory named latest which could mean a version of the container […]