CVE-2018-15657: Server-Side Request Forgery (SSRF)

An SSRF issue was discovered in 42Gears SureMDM before 2018-11-27 via the /api/DownloadUrlResponse.ashx "url" parameter...