This vulnerability, identified as CWE-918 SSRF, affects Photo Block versions up to and including 1.7.1. It allows an attacker with high privileges to cause the server to make unintended requests, which could lead to limited confidentiality and integrity impacts. The CVSS 3.1 base score is 4.4, reflecting a medium severity with network attack vector, high attack complexity, required privileges, no user interaction, and a scope change. No official remediation or patch is currently documented, and no exploits are known in the wild.

The SSRF vulnerability can be exploited by an attacker with high privileges to make the server perform unintended requests, potentially exposing internal resources or data. The impact is limited to partial confidentiality and integrity loss, with no availability impact reported. This could allow attackers to access or manipulate information indirectly through the server.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or mitigation is currently documented, users should restrict high-privilege access to the affected software and monitor for vendor updates. Avoid exposing the vulnerable service to untrusted networks until a patch is available.