CVE-2023-50259 | pymedusa Medusa up to 1.0.18 POST Request handler.py testslack slack_webhook server-side request forgery (GHSA-8mcr-vffr-jwxv)

CVE-2023-50259 | pymedusa Medusa up to 1.0.18 POST Request handler.py testslack slack_webhook server-side request forgery (GHSA-8mcr-vffr-jwxv)

A vulnerability classified as critical has been found in pymedusa Medusa up to 1.0.18. This affects the function testslack of the file medusa/server/web/home/handler.py of the component POST Request Handler. The manipulation of the argument slack_webhook leads to server-side request forgery. This vulnerability is uniquely identified as CVE-2023-50259. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.