Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the getValidUrl process in the webhook connector, which fails to properly validate hostnames and private IP ranges. An attacker can cause the server to send unauthorized HTTP POST requests to interna...