This vulnerability involves an SSRF flaw in a GraphQL service shared by Altium Enterprise Server and Altium 365. An authenticated attacker can supply input treated as a URL, which the server uses to issue outbound HTTP GET requests without validating the URL or filtering the destination. The server returns the response body to the attacker, enabling access to internal resources and metadata endpoints that are otherwise inaccessible externally. The vulnerability is limited to HTTP GET requests without custom headers. Altium Enterprise Server versions before 8.1.1 are affected. Altium 365's cloud service has been remediated by the vendor.

An authenticated attacker can exploit this SSRF vulnerability to perform internal network reconnaissance and retrieve sensitive information from internal services and metadata endpoints. This leads to information disclosure that could aid further attacks or compromise internal infrastructure confidentiality. The attack is limited to HTTP GET requests and does not allow arbitrary request methods or headers.

A fix is available in Altium Enterprise Server version 8.1.1. Users should upgrade to this version to remediate the vulnerability. For Altium 365, the vendor has already remediated the issue at the service level, so no user action is required for the cloud service.