Najafov

**Name of the Vulnerable Software and Affected Versions** Friendica versions after v.2023.12 **Description** A Server Side Request Forgery (SSRF) issue allows a remote attacker to execute arbitrary code and obtain sensitive information via the fpostit.php component. **Recommendations** For Friendica versions after v.2023.12, consider disabling access to the fpostit.php component until a patch is available. Restricting the functionality of this component can help minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.