This vulnerability involves an SSRF issue in SpringBlade v4.8.0 at the /ureport/datasource/testConnection endpoint. Authenticated users can exploit this flaw to perform internal network scanning by sending specially crafted GET requests. The vulnerability could potentially expose internal resources to attackers with valid credentials. No CVSS score or detailed impact metrics are provided, and no patch or mitigation details are available from the vendor or other sources.

An authenticated attacker can leverage this SSRF vulnerability to scan internal network resources, potentially gathering sensitive information about internal services or infrastructure. This could facilitate further attacks or reconnaissance within the affected environment. There is no evidence of remote unauthenticated exploitation or direct code execution from the provided data.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the vulnerable endpoint to trusted users only and monitor for suspicious authenticated activity targeting the /ureport/datasource/testConnection endpoint.