Server-side request forgery (SSRF) is a vulnerability that lets a malicious hacker send a request from the back end of an application to another server or to a local service. The server or service receiving that request then believes that it came from the application and is legitimate.
Read about the Capital One 2019 attack, where SSRF was one of the techniques used.