Sonicverse audiostreaming-stack's dashboard API client improperly validates user-supplied URLs, enabling an authenticated operator to perform SSRF attacks. This allows the backend server to send arbitrary HTTP requests to internal or external systems, potentially exposing sensitive data or enabling further attacks. The vulnerability affects versions prior to commit cb1ddbacafcb441549fe87d3eeabdb6a085325e4. The CVSS 3.1 score of 9.9 reflects network attack vector, low attack complexity, required privileges, no user interaction, and high impact on confidentiality, integrity, and low impact on availability.

An authenticated operator can exploit this SSRF vulnerability to make arbitrary HTTP requests from the backend server to internal or external systems. This can lead to unauthorized information disclosure, potential internal network scanning, or interaction with otherwise inaccessible services. The vulnerability severely impacts confidentiality and integrity, with a minor impact on availability.

A fix is available and implemented in commit cb1ddbacafcb441549fe87d3eeabdb6a085325e4. Users should update their Sonicverse audiostreaming-stack installations to this commit or later to remediate the SSRF vulnerability. Since this is a self-hosted Docker Compose stack, operators must manually apply the update. No vendor advisory was provided to indicate alternative mitigations or that no action is required.