Flextype v1.0.0-alpha.3 Server-Side Request Forgery via fetch() in Query API

<p>Posted by Ron E on Sep 03</p>Description<br /> <br /> Flextype CMS v1.0.0-alpha.3 contains a server-side request forgery (SSRF)<br /> vulnerability in the expression-processing functionality exposed through<br /> the /api/v1/query endpoint. An authenticated remote attacker can supply an<br /> arbitrary URL to the exposed fetch() function, causing the Flextype server<br /> to initiate an outboun