Threats affecting pkg:github/endatix/endatix

Endatix versions prior to 0.7.0 contain a server-side request forgery (SSRF) vulnerability in the handling of anonymous form submissions. An attacker can submit JSON data containing URLs that are later fetched by staff users with appropriate permissions, allowing blind SSRF to internal network resources. The vulnerability is fixed in version 0.7.0.