Serendipity

Serendipity versions prior to 2.6.0 contain a Server-Side Request Forgery vulnerability allowing authenticated admins to reach internal network resources using bypassed address filters.