The Huly Platform through version 0.7.423 contains an authenticated SSRF vulnerability in the /import endpoint of the front pod. Authenticated users can supply crafted URLs that cause the server to make arbitrary requests to internal services, potentially exposing sensitive data or enabling credential replay attacks against backend systems. The vulnerability is fixed in a commit identified as 68cbf8a, but no formal vendor advisory or patch link is provided. The CVSS 4.0 vector indicates network attack vector, low attack complexity, low privileges required, no user interaction, and high scope impact with limited integrity impact.

Exploitation allows authenticated workspace users to induce the server to make arbitrary HTTP requests, potentially accessing internal services not otherwise reachable. This can lead to unauthorized data exposure, exfiltration of sensitive responses, and replaying of credentials against backend systems, increasing the risk of lateral movement or privilege escalation within the environment.

A fix is available in the form of a commit (68cbf8a) that addresses the SSRF vulnerability. Users should upgrade to a version later than 0.7.423 that includes this fix. Since no official vendor advisory or patch link is provided, users should verify the fix is applied in their deployments. Until patched, restrict access to the /import endpoint to trusted users and monitor for suspicious usage patterns.