LuquidPixels LiquiFire OS 4.8.0 allows SSRF via the call%3Durl substring followed by a URL in square brackets.

Published Dec 29, 2019 · Updated Aug 5, 2024 · Assigned by mitre