This vulnerability in totalsoft TS Poll (poll-wp) allows an attacker with high privileges to perform Server-Side Request Forgery (SSRF), causing the server to make unintended requests. The affected versions are from an unspecified start version through 2.5.5. The CVSS 3.1 vector indicates network attack vector, high attack complexity, high privileges required, no user interaction, and impacts on confidentiality and integrity with no availability impact.

An attacker with high privileges can exploit this SSRF vulnerability to cause the server to send crafted requests to internal or external systems, potentially exposing sensitive information or altering data integrity. The impact is limited to confidentiality and integrity, with no availability impact reported. No known exploitation in the wild has been documented.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor totalsoft's advisories for updates. In the meantime, restrict high-privilege access to the affected TS Poll versions and consider network-level controls to limit the server's ability to make arbitrary requests.