Crawl4AI Server-Side Request Forgery Vulnerability

A server-side request forgery (SSRF) vulnerability exists in Crawl4AI versions through 0.4.247, specifically within the file async_dispatcher.py. This vulnerability allows an attacker to make unauthorized requests from the server, potentially leading to the exposure of internal resources or services.

Impact

Exploitation of this vulnerability allows for server-side request forgery, where an attacker can manipulate the server to make requests on their behalf. This could be used to access internal services or resources that are not normally exposed to the outside world.