Microsoft Forefront Unified Access Gateway 2010 allows remote attackers to trigger outbound DNS queries for arbitrary hosts via a comma-separated list of URLs in the orig_url parameter, possibly causing a traffic amplification and/or SSRF outcome.
8d4365ff29749bb00d4c8602fbe202d9eb5614113efcfe36a584be9168f59cad