Server-side Request Forgery (SSRF)

Overview @budibase/server is a Budibase Web Server Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the fetchToken process. An attacker can access internal network resources and potentially sensitive data by supplying a crafted OAuth2 token endpoint URL tha...