Term Kind Topic What it is
Capital One 2019: From SSRF to the Metadata Endpoint IMDSv1 Breach case-study Identity & Access Management A server-side request forgery reached the cloud instance metadata service, obtained temporary credentials, and used an over-permissioned role to read a very large volume of data.