MaxKB: Authenticated full-read SSRF via the knowledge web-document import/sync crawler (Fork.fork requests.get, no internal-IP guard, non-blind)

{
                    "vendor": "1Panel-dev",
                    "product": "MaxKB",
                    "versions": [
                        {
                            "version": "<= 2.10.3-lts",
                            "status": "affected"
                        }
                    ]
                }