FireFly (<= 1.4.0)

Hyperledger FireFly versions 1.4.0 and earlier contain an SSRF vulnerability in the Webhook Subscription component, allowing unauthenticated remote attackers to perform unauthorized requests via manipulation of the URL argument.