Server-Side Request Forgery (SSRF)

Koel is vulnerable to Server-Side Request Forgery SSRF. The vulnerability is due to insufficient validation of podcast episode URLs before they are fetched by the server, which allows an attacker to supply a crafted RSS feed that causes the server to make arbitrary HTTP requests to internal...

PT-2023-12240 · Koel · Koel

Name of the Vulnerable Software and Affected Versions: Koel versions 5.1.4 and earlier Description: An issue in Koel allows remote attackers to gain access to sensitive information via the login form parameters. Recommendations: For versions 5.1.4 and earlier, at the moment, there is no informati...