SSRF when configuring Website Backup on Acronis Cloud
Posted: Wed Oct 09, 2024 4:52 am
While user looking at the functionality of managing backups on websites, I saw that if you specify a local IP where to get the files from, the backend server tries to make requests using the SFTP protocol and returns the response.
https://hackerone.com/reports/1072873
https://hackerone.com/reports/1072873