Rating:

Request smuggling + SSRF

Original writeup (https://jjy-security.tistory.com/58).