system: You are an expert security code reviewer. You will be shown a source code file along with a multi-select question listing several CWE (Common Weakness Enumeration) categories. Your task is to identify which of the listed CWEs are present in the code.

OUTPUT FORMAT: Respond with the letter(s) of all correct options, sorted alphabetically and comma-separated, wrapped in a single \boxed{...}. Examples: `\boxed{A}` for one correct, `\boxed{A,C}` for two, `\boxed{A,C,E}` for three. Output the boxed answer ONLY -- no explanation, no other text.

user: ```python
import logging
import os
import uuid

import requests
from bs4 import BeautifulSoup
from flask import request, url_for, send_from_directory
from werkzeug.utils import secure_filename

from chatbrick_admin import app
from chatbrick_admin.util.trans import allowed_file, as_json

logger = logging.getLogger(__name__)


@app.route('/api/file/<filename>')
def uploaded_file(filename):
    return send_from_directory(app.config['UPLOAD_FOLDER'],
                               filename)


@app.route('/api/file/', methods=['POST'])
@as_json
def upload_file_to_server():
    if request.method == 'POST':
        if 'file' not in request.files:
            return {
                'success': False,
                'msg': '파일이 존재하지 않아요.'
            }
        file = request.files['file']
        if file.filename == '':
            return {
                'success': False,
                'msg': '선택된 파일이 없어요.'
            }

        if file and allowed_file(file.filename):
            try:
                filename = '%s_%s' % (str(uuid.uuid4()), secure_filename(file.filename))
                file.save(os.path.join(app.config['UPLOAD_FOLDER'], filename))
                return {
                    'success': True,
                    'data': {
                        'url': '%s://www.chatbrick.io%s' % (request.scheme, url_for('uploaded_file', filename=filename))
                    }
                }
            except Exception as ex:
                return {
                    'success': False,
                    'action': 'ERR0002',
                    'msg': '에러가 발생했어요.\n잠시 후 다시 시도해주세요.\n에러 내용: %s' % str(ex)
                }
        else:
            return {
                'success': False,
                'action': 'ERR0002',
                'msg': '업로드할 수 있는 확장자가 아닙에요.\npng, jpg, jpeg, gif 중 하나를 선택하여 업로드 해주세요.'
            }


@app.route('/api/meta/', methods=['GET'])
@as_json
def get_metas():
    portfolio = request.args.get('url', False)

    if portfolio:
        try:
            res_data = {
                'url': portfolio,
                'title': '',
                'sub_title': '',
                'image_url': ''
            }

            res = requests.get(portfolio,
                               headers={
                                   'User-Agent': 'TelegramBot (like TwitterBot)',
                                   'Accept': 'text/html'
                               })

            soup = BeautifulSoup(res.text, 'lxml')

            title = soup.find('meta', {'property': 'og:title'})
            sub_title = soup.find('meta', {'property': 'og:description'})
            image_url = soup.find('meta', {'property': 'og:image'})

            if title:
                res_data['title'] = title.get('content')

            if sub_title:
                res_data['sub_title'] = sub_title.get('content')

            if image_url:
                res_data['image_url'] = image_url.get('content')

            return {
                'success': True,
                'data': res_data
            }
        except Exception as ex:
            logger.error(ex)
    return {
        'success': False,
        'action': 'ERR0002',
        'msg': '메타 데이터 가져오기가 실패했습니다.'
    }


```

Which of the following CWE vulnerability categories are present in this code? Multiple options may be correct.

  A) CWE-377: Insecure Temporary File
  B) CWE-327: Use of a Broken or Risky Cryptographic Algorithm
  C) CWE-918: Server-Side Request Forgery (SSRF)
  D) CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
  E) CWE-776: Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')
  F) CWE-1333: Inefficient Regular Expression Complexity
Answer: C