Is it considered a SSRF vulnerability (or is it dangerous at all) if the backend of an application fetches a URL that is somewhat based off of user input, in a way similar to this
get("https://thehostname.com/a-directory/" + userinput)
So, because the hostname is hardcoded before the user input, it shouldn't be possible to scan the internal network or anything, right?
Without an open redirect vulnerability in
https://thehostname.com/*, I don't see how you could pull anything off with that.
Edit: In the specific scenario that I am asking this question for, the server only responds with a true/false/error, indicating whether the content type of http response is a pdf, or if it failed to fetch the page (404, or host is down).