This vulnerability in Andy Fragen Embed PDF Viewer (<= 2.4.7) allows an attacker to perform SSRF attacks, where the server can be tricked into making unauthorized requests. The CVSS vector indicates network attack vector, high attack complexity, low privileges required, no user interaction, and impacts on confidentiality and integrity but not availability. The vulnerability is published but lacks a vendor advisory or patch information.

An attacker could leverage this SSRF vulnerability to cause the server to send crafted requests to internal or external systems, potentially exposing sensitive information or manipulating data. The impact is limited to confidentiality and integrity with no direct availability impact. No known exploitation in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict network access from the affected server to untrusted or sensitive internal resources to reduce SSRF attack surface.