Lqz8686

**Name of the Vulnerable Software and Affected Versions** AeternaLabsHQ PullMD version 3.2.0 **Description** A server-side request forgery (SSRF) exists in the REST API Endpoint component. This occurs when the `url` argument is manipulated within the '/api' endpoint, allowing a remote attacker to induce the server to make unauthorized requests. **Recommendations** Update to version 3.3.0. As a temporary mitigation, restrict access to the '/api' endpoint to minimize the risk of exploitation.