CVE-2024-27564

CVE-2024-27564 describes a Server-Side Request Forgery in pictureproxy.php (dirk1983 mm1.ltd, commit f9f4bbc). The flaw allows an attacker to supply a crafted URL via the url parameter to trigger arbitrary requests from the application, potentially reading local or internal resources. Connected d...