This vulnerability in princeahmed Radio Player (versions <= 2.0.91) allows an unauthenticated attacker to perform Server-Side Request Forgery (SSRF). SSRF vulnerabilities enable attackers to make the server send crafted requests to internal or external systems, which can lead to limited confidentiality and integrity impacts. The CVSS vector indicates the attack requires network access with high attack complexity and no privileges or user interaction. The impact is limited to partial confidentiality and integrity loss without availability impact.

An attacker can exploit this SSRF vulnerability to cause the server to make unintended requests, potentially accessing internal resources or sensitive information. The impact is limited to partial confidentiality and integrity compromise. There is no indication of availability impact or widespread exploitation currently.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict network access to the Radio Player server and monitor for unusual outbound requests to mitigate potential exploitation.