MagicMirror newsfeed Socket.IO notification allows blind server-side request forgery

Vulnerability — Blind SSRF via CHECK_ARTICLE_URL (MagicMirror² newsfeed) > Analysis of the PoC exploit-ssrf-newsfeed.js. > Target: newsfeed/node_helper.js of MagicMirror², socket.io namespace /newsfeed. --- ## Identification | Field | Value | |-------|-------| | PoC file | `exploit-...