SSRF can be anywhere from harmless to catastrophic. This depends on a number of factors like the visibility of the response and which internal hosts are accessible. At its absolute worst, SSRF vulnerabilities could result in a full compromise of cloud environments, internal administrative dashboards being exposed, or internal hosts being exploited.