Using external resource URLs based on user input for webhooks, file fetching, custom SSO, URL previews, or redirects can lead to Server Side Request Forgery (SSRF) and other security issues.
OWASP API7 2023 Concerning URL Parameter
Message: Make sure to review the way this URL parameter is handled to protect against Server Side Request Forgery.