OctoberCMS (<= 4.1.19, <= 4.2.25, <= 4.3.4)

An unauthenticated server-side request forgery (SSRF) vulnerability in OctoberCMS allows remote attackers to manipulate the realSourcePath argument to perform unauthorized internal network requests.