Server Side Request Forgery is a web security vulnerability in web applications in which the user can forge server request to access unintended location usually these are request made to internal-only services within the organization's infrastructure.

Insecure Direct Object Reference is an access control check vulnerability in web applications in which the user can modify or access data objects by manipulating the identifiers (ID) in the web URL or user request sent to the server.

Unrestricted file upload is a security vulnerability that allows an attacker to upload malicious files to server, it occurs when application does not properly validate the file type or its content.