Server-Side Request Forgery (SSRF)

io.kestra, core is vulnerable to Server-Side Request Forgery SSRF. The vulnerability is due to insufficient validation of user-controlled HTTP URI destinations, which allows an unauthenticated attacker to import and execute a flow that makes requests to internal services, loopback/link-local...