Server-side Request Forgery (SSRF)

Overview phanan/koel is a personal audio streaming service. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the openStream function. An attacker can retrieve sensitive information from internal network resources by supplying a crafted URL to the...