HaoKeKeJi YiQiNiu versions up to 3.1 suffer from a server-side request forgery vulnerability. Continue reading...