This vulnerability involves an SSRF flaw in a GraphQL service component shared by Altium Enterprise Server and Altium 365. Authenticated users can submit inputs treated as URLs, which the server uses to perform outbound HTTP GET requests without validating or filtering the destination. The server returns the response body to the user, enabling access to internal network resources and metadata endpoints that are normally inaccessible externally. The SSRF is limited to HTTP GET requests without custom headers. Altium Enterprise Server version 8.1.1 includes a fix, and Altium 365 is remediated at the service level.

The vulnerability allows authenticated attackers to perform internal network reconnaissance and disclose sensitive information by accessing internal services and metadata endpoints. This can lead to exposure of internal infrastructure details that could facilitate further attacks. The impact is limited to information disclosure and does not include privilege escalation or code execution based on the provided data.

A fix is available in Altium Enterprise Server version 8.1.1. Users should upgrade to this version to remediate the vulnerability. For Altium 365, the issue has been remediated at the service level by the vendor, so no user action is required for the cloud service. Patch status for on-premises deployments should be confirmed by consulting the vendor advisory.