Server-Side Request Forgery (SSRF)

Koel is vulnerable to Server-Side Request Forgery SSRF. The vulnerability is due to missing SSRF protections on the Subsonic-compatible radio endpoints, which allows an authenticated attacker to make the server fetch arbitrary private URLs and return the response content...