This vulnerability in Metagauss ProfileGrid (profilegrid-user-profiles-groups-and-communities) allows an attacker to perform SSRF attacks, where the server can be tricked into making unauthorized requests. The affected versions include all versions up to 5.9.5.2. The CVSS vector indicates the attack requires network access, high attack complexity, low privileges, no user interaction, and impacts confidentiality and integrity with no impact on availability.

An attacker with network access and low privileges can exploit this SSRF vulnerability to cause the server to send crafted requests, potentially leading to unauthorized information disclosure or manipulation of data. The impact is limited to confidentiality and integrity, with no direct availability impact. No known exploitation in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor vendor communications for updates. In the meantime, restricting network access and validating or sanitizing user-supplied URLs or inputs that trigger server requests may reduce risk.