This vulnerability in DataHub v1.5.0.1 is a blind SSRF that enables remote code execution. An attacker can exploit the server's behavior of fetching images from attacker-controlled URLs to execute arbitrary code on the server. The blind nature means the server does not provide direct feedback or error messages to the attacker, complicating detection and exploitation. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability.

Successful exploitation allows a remote unauthenticated attacker to execute arbitrary code on the affected server, potentially leading to full system compromise. The vulnerability impacts confidentiality, integrity, and availability severely, as indicated by the CVSS score of 9.8.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided in the available data. Until a patch is available, restrict access to the vulnerable service and monitor for suspicious network activity related to SSRF attempts.