CVE-2024-52588

Summary (CVE-2024-52588): Strapi CMS prior to 4.25.2 is vulnerable to SSRF via the Webhooks URL field, where entering a local domain can cause the server to fetch itself. Affected component is the Webhooks URL handling; root cause is improper validation/handling of internal destinations. Impact i...