Server-side Request Forgery (SSRF)

Overview openclaw is a 🦞 OpenClaw — Personal AI Assistant Affected versions of this package are vulnerable to Server-side Request Forgery SSRF in the websearch citation redirect. An attacker can access internal network resources by supplying a crafted citation redirect target that points to...