Vimeo SSRF with code execution potential.

CERT-LatestNews
parameter. Path traversal in HTTP requests made on server side. I first tried to change URI parameter to my custom path however any change in URI will result in a 403, Means that they’re allowing a set of API endpoints. However, changing the value of variables such as user_id & videos_id is possible....