The vulnerability in Zenith Satellite Tracker 1.0's sat_proxy.php script allows unauthenticated attackers to supply a URL parameter that is used directly in a cURL request without validation. This Server-Side Request Forgery (SSRF) flaw enables attackers to make arbitrary HTTP/HTTPS requests from the vulnerable server to internal or external systems, potentially exposing sensitive information or enabling further attacks through pivoting.

An unauthenticated remote attacker can exploit this SSRF vulnerability to make arbitrary HTTP and HTTPS requests from the vulnerable server. This can lead to unauthorized access to internal network resources or cloud metadata services, which may result in information disclosure or facilitate further attacks within the internal network environment.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the vulnerable script and implement network-level controls to limit the server's ability to make arbitrary outbound requests. Validate and sanitize user-supplied URL parameters to ensure only authorized hosts and schemes are allowed.