KaizenCoders URL Shortify up to version 1.12.3 contains an SSRF vulnerability that can be exploited by an attacker with high privileges to cause the server to perform unauthorized requests. The vulnerability impacts confidentiality and integrity but does not affect availability. The CVSS 3.1 vector indicates network attack vector, low attack complexity, required privileges are high, no user interaction needed, and scope is changed.

An attacker with high privileges could exploit this SSRF vulnerability to make the server send crafted requests, potentially accessing or modifying internal resources or data. The impact is limited to partial loss of confidentiality and integrity, with no availability impact reported. There are no known active exploits targeting this vulnerability currently.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor KaizenCoders advisories for updates. In the meantime, restrict high-privilege access to the URL Shortify application and consider network-level controls to limit outbound requests from the server.