SSRF Bypass via OpenRedirect

If the server is correctly protected you could bypass all the restrictions by exploiting an Open Redirect inside the web page. Because the webpage will allow SSRF to the same domain and probably will follow redirects, you can exploit the Open Redirect to make the server to access internal any resource. Read more here: https://portswigger.net/web-security/ssrf/lab-ssrf-filter-bypass-via-open-redirection Reference: https://portswigger.net/web-security/ssrf