Zorlan SkyCaiji Server-Side Request Forgery Vulnerability

A critical server-side request forgery (SSRF) vulnerability has been identified in Zorlan SkyCaiji version 2.9. The issue arises in the 'previewAction' function within 'vendor/skycaiji/app/admin/controller/Tool.php'. The vulnerability allows remote exploitation by manipulating the 'data' argument, potentially leading to unauthorized requests being sent from the server.

Impact

Exploitation of this vulnerability allows for server-side request forgery, where an attacker can make the server send requests on its behalf. This could be used to access internal services or resources that are not normally exposed to the outside world.