CVE-2024-36471 — Import functionality is vulnerable to DNS rebinding attacks between verification and processing of the URL. Project administrators can run these imports, which could cause Allura to read from interna — CVE Database · The Intelligence Room