This vulnerability in Nelio Content allows an attacker with low privileges to perform SSRF attacks, potentially causing the server to make unauthorized requests. The issue affects all versions up to 4.3.1. The CVSS 3.1 vector indicates network attack vector, high attack complexity, low privileges required, no user interaction, and a scope change with limited confidentiality and integrity impacts but no availability impact. No official remediation or patch is currently documented.

An attacker with low privileges could exploit this SSRF vulnerability to make the server send crafted requests, potentially accessing internal resources or information not otherwise accessible. The impact is limited to partial confidentiality and integrity loss without affecting availability. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should limit access privileges and monitor for updates from Nelio Software. No vendor-provided mitigation or temporary fix is currently documented.