Server-Side Request Forgery (SSRF)

foodcoopshop/foodcoopshop is vulnerable to Server-Side Request Forgery (SSRF). The vulnerability is due to the lack of proper image validation. This flaw permits an attacker to send a request to any host on the local network, which then responds with a 200 status code for a HEAD requests serving a valid image for the first GET request, and issues a 302 redirect to a final target on the second GET request. As a result, the server inadvertently copies whatever file is present at the redirect destination through the /api/updateProducts.json endpoint.