CVE-2025-57305 identifies a Server-Side Request Forgery (SSRF) vulnerability in VitaraCharts version 5.3.5 specifically in the fileLoader.jsp file. SSRF vulnerabilities allow attackers to make the vulnerable server perform HTTP requests to arbitrary URLs, potentially accessing internal resources or services. This vulnerability does not require authentication and has a low attack complexity. The impact is limited to partial confidentiality loss and low availability impact, with no integrity impact. No official patch or remediation information is provided in the available data.

An attacker can exploit this SSRF vulnerability to cause the VitaraCharts server to send crafted HTTP requests to arbitrary destinations. This may lead to limited confidentiality loss by accessing internal or protected resources and a low impact on availability. There is no reported impact on data integrity. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor for vendor updates. Until a fix is available, consider restricting outbound HTTP requests from the server hosting VitaraCharts or applying network-level controls to limit potential SSRF exploitation.