An authenticated administrator is able to prepare an alert that is able to execute an SSRF attack. This is exclusively with POST requests.
osnexus quantastor