TYPO3 Kitodo.Presentation: Server-side request forgeing vulnerability

Versions of TYPO3 prior to 6.0.1 and from 7.0.0 to 7.0.2 contain a server-side request forgeing vulnerability. This vulnerability stems from an HTTP request method that fails to perform authorization checks. As a result, the requester has full control over the accessed URL. Unauthenticated...