PT-2023-30172

Name of the Vulnerable Software and Affected Versions FoodCoopShop versions prior to 3.6.1 Description The issue is related to server-side request forgery. In the Network module, a manufacturer account can use the "/api/updateProducts.json" endpoint to make the server send a request to an arbitra...