This vulnerability in DbGate (up to version 7.1.4) involves the apiServerUrl1 function within the REST/GraphQL component, specifically in the file packages/rest/src/openApiDriver.ts. It allows an attacker to perform server-side request forgery (SSRF), potentially causing the server to make unintended requests. The vulnerability can be triggered remotely without user interaction and requires low privileges. The CVSS 4.0 vector indicates network attack vector, low attack complexity, no privileges required, and low impact on confidentiality, integrity, and availability. The vendor has not issued a patch or advisory, and the exploit is publicly available.

An attacker can exploit this SSRF vulnerability to make the vulnerable server send crafted requests to internal or external systems. This could lead to unauthorized information disclosure or interaction with internal services. However, the overall impact is rated medium due to limited impact on confidentiality, integrity, and availability as per the CVSS vector. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded and no official fix is available, users should consider restricting network access to the vulnerable service and monitoring for unusual outbound requests as interim mitigations. Avoid exposing the vulnerable versions to untrusted networks until a patch or official guidance is provided.