Security Advisory
CVE-2018-1000138
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
I, Librarian version 4.8 and earlier contains a SSRF vulnerability in "url" parameter of getFromWeb in functions.php that can result in the attacker abusing functionality on the server to read or update internal resources.