The SSRF vulnerability in plank laravel-mediable before version 7.0.0 arises from insufficient validation of user-supplied URLs passed to MediaUploader::fromSource(). Attackers can exploit this to cause the server to perform HTTP requests to internal or restricted network resources, including RFC-1918 private addresses, loopback interfaces, cloud metadata endpoints, or file:// URIs via the RemoteUrlAdapter. This can lead to unauthorized access to internal infrastructure, retrieval of sensitive files, and exfiltration of cloud credentials such as IAM tokens from instance metadata services. The vulnerability is publicly known but no official fix or patch has been disclosed as of the published date.

Successful exploitation allows remote attackers to coerce the server into making arbitrary HTTP requests to internal or protected network resources. This can lead to exposure of sensitive internal files and cloud instance metadata, including credentials like IAM tokens, potentially compromising the confidentiality and security of internal systems and cloud environments. The medium CVSS score reflects the moderate complexity and impact of the vulnerability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to endpoints using MediaUploader::fromSource() to trusted users only and implement network-level controls to limit server outbound requests to internal or sensitive addresses. Validate and sanitize all user-supplied URLs before processing to prevent SSRF exploitation.