Explain how you would identify and remediate an SSRF vulnerability in a legacy web application at ABC News.