Gophish Server-Side Request Forgery via Import Site

Gophish Server-Side Request Forgery via Import Site: a task in LegoFlow-SWE (Harbor dataset). Any authenticated user can abuse the Import Site feature (endpoint /api/import/site ) to force the Gophish server to make HTTP requests to internal and private network addresses. This includes, but is not…

The task

Any authenticated user can abuse the **Import Site** feature (endpoint `/api/import/site`) to force the Gophish server to make HTTP requests to internal and private network addresses. This includes, but is not limited to:

Part of Lego-X/LegoFlow-SWE.