SSRF is a web vulnerability that allows attackers to force servers into unauthorized HTTP requests. Exploited through input manipulation or web app vulnerabilities, it tricks servers into accessing URLs controlled by the attacker. This can result in data theft, unauthorized system access, or denial-of-service attacks. SSRF compromises sensitive info in cases where servers fetch data from internal APIs, putting security at risk. Its risk also includes internal systems that are not accessible via the Internet.