Which of the following scenarios is MOST indicative of a server-side request forgery (SSRF) vulnerability being exploited?
An attacker induces the server to make a request to an internal resource, which should not be accessible.
A user's web browser is compromised by malicious script that executes when visiting a compromised website.
A user input is directly inserted into a database query without sanitization, leading to unauthorized data exposure.
A server application crashes due to a buffer overflow caused by unexpected user input.