Unleash: Addon webhook URL is dialed server-side with no internal-address filtering, enabling SSRF to internal services / cloud metadata and exfiltration of configured request headers

{
                    "vendor": "Unleash",
                    "product": "unleash",
                    "versions": [
                        {
                            "version": "< 7.5.2",
                            "status": "affected"
                        },
                        {
                            "version": ">= 7.6.0, < 7.6.5",
                            "status": "affected"
                        },
                        {
                            "version": ">= 8.0.0, < 8.0.2",
                            "status": "affected"
                        }
                    ]
                }