An application fetches a user-provided URL on its server. In a scoped lab replica, the tester causes it to request a restricted internal endpoint. Which vulnerability does this demonstrate?

1. A stack buffer overflow
2. A rogue DHCP server
3. Server-side request forgery
4. Cross-site request forgery