SSRF in Export template to ActiveCampaign

How it was found

Summary:

I found a SSRF vulneranility in export template to email marketing platform (ActiveCampaign).

Steps To Reproduce:

[add details for how we can reproduce the issue]

1. Login to your account in
2. Go to https://my.stripo.email/cabinet/#/templates/
3. Click on Create your first mail & select one template
4. Export
5. Click on ActiveCampaign
6. Insert your server address in API URL and a fake string in API Key
7. Now Click on Export and see your server logs {F654075}

PoC Video

{F654076}

Impact

The export template to ActiveCampaign is vulnerable to a SSRF vulnerability. The vulnerability allows an attacker to make arbitrary HTTP/HTTPS requests.