Xibo CMS versions before 4.4.1 contain an authenticated SSRF vulnerability (CWE-918) that allows users with Library upload permissions to induce the server to send arbitrary HTTP requests. This can be leveraged to probe internal networks, access sensitive cloud metadata endpoints, and interact with internal services lacking authentication. The vulnerability is addressed in version 4.4.1. Since Xibo CMS is a cloud service, the vendor typically handles patching server-side.

Successful exploitation allows an authenticated user with limited permissions to perform SSRF attacks, potentially leading to internal network reconnaissance, unauthorized access to cloud metadata services (e.g., AWS IMDS), interaction with internal services without authentication, and data exfiltration. This compromises confidentiality but does not affect integrity or availability according to the CVSS vector.

A fix is available in Xibo CMS version 4.4.1. Since this is a cloud-hosted service, the vendor manages remediation server-side. Users should verify with the vendor advisory that their instance is updated to 4.4.1 or later to ensure this vulnerability is mitigated.