Server-side Request Forgery

LimeSurvey is vulnerable to Server-Side Request Forgery SSRF. The vulnerability is due to improper validation of the HTTP Host header in getTemplateData, allowing authenticated attackers to force the server to send requests to internal services or cloud metadata endpoints and potentially expose...