PT-2025-23048 · Strapi · Strapi

Name of the Vulnerable Software and Affected Versions: Strapi versions prior to 4.25.2 Description: The issue allows an attacker to input a local domain into the Webhooks URL field, leading to a server-side request forgery SSRF. This enables the application to fetch itself, potentially allowing a...