GHSA-fcvr-25qj-4jg8: YesWiki server-side request forgery vulnerability
YesWiki versions before 4.7.0 contain a server-side request forgery (SSRF) vulnerability in the Bazar CSV import function copyUrlToLocalFile(). Authenticated administrators can make arbitrary outbound requests using crafted URLs.
CERT24