#arbitrary-file-read

TryHackMe : The London Bridge writeup

Summary The London Bridge is built around a Flask "Explore London" gallery app served behind Gunicorn. A hidden /view_image endpoint takes a form-encoded URL and fetches it server-side - classic SSRF