A Server-Side Request Forgery (SSRF) affects Rocket.Chat's Twilio webhook endpoint before version 6.10.1.Referenceshttps://hackerone.com/reports/1886954
