This vulnerability in 1Panel-dev CordysCRM up to version 1.4.1 involves a server-side request forgery (SSRF) due to improper handling of the mkAddress argument in the backend/crm/src/main/java/cn/cordys/crm/integration/sso/service/TokenService.java file. An attacker can remotely manipulate this argument to induce the server to make unintended requests. The vulnerability is classified as medium severity with a CVSS 4.0 score of 5.3, indicating network attack vector, low complexity, no privileges required, no user interaction, and low to limited impact on confidentiality, integrity, and availability. The vendor has not provided an official fix or remediation, and the issue report was closed without acceptance as a security vulnerability. Public exploit information exists, but no active exploitation has been confirmed.

Successful exploitation allows a remote attacker to perform server-side request forgery, potentially causing the server to make unauthorized requests to internal or external systems. The impact on confidentiality, integrity, and availability is rated as low to limited. No evidence of active exploitation in the wild is currently known.

No official patch or remediation guidance is currently available from the vendor. Patch status is not yet confirmed—check the vendor advisory or project updates for current remediation guidance. Until a fix is provided, users should consider restricting network access and monitoring for unusual server request activity related to the affected component.