OX App Suite through 7.10.6 allows SSRF because the anti-SSRF protection mechanism only checks the first DNS AA or AAAA record.

Published Dec 26, 2022 · Updated Apr 14, 2025 · Assigned by mitre