Imgur disclosed on HackerOne: SSRF in https://imgur.com/vidgif/url

Added on 2023-08-13
Page: https://hackerone.com/reports/115748
See on Internet Archive
#new

Hello, Short description ======== https://imgur.com/vidgif/url endpoint is vulnerable to a SSRF vulnerability which allows an attacker to craft connections originating from imgur servers to any destination on the internet and imgur internal network and craft outgoing UDP-packets / telnet-based protocol sessions (for example, to connect to SMTP servers from imgur and send spam). Why does the...