Server-Side Request Forgery (SSRF)

Koel is vulnerable to Server-Side Request Forgery SSRF. The vulnerability is due to missing SafeUrl validation on the Subsonic-compatible podcast creation endpoint, which allows an authenticated attacker to make the server fetch arbitrary private URLs during podcast parsing...