ZDI-26-703: (0Day) Airbyte SharePoint Connector _get_shared_drive_object Server-Side Request Forgery Information Disclosure Vulnerability

This vulnerability allows remote attackers to initiate arbitrary server-side requests on affected installations of Airbyte. Authentication is required to exploit the vulnerability. The flaw exists in the _get_shared_drive_object method because it does not properly validate a URI before accessing resources, allowing an attacker to disclose information in the context of the service account.