FlowIntel up to version 3.3.0 contains a server-side request forgery (SSRF) vulnerability in the external reference URL probe functionality in app/case/task.py.
CVSS 4.0MEDIUM 6.2·Network·Low privileges·User interaction·EPSS 0.00232·Published 2026-05-28·Fixed in 3.3.0CWE-918