This vulnerability in Typecho (up to version 1.3.0) involves the Service::sendPingHandle function within var/Widget/Service.php, specifically in the Ping Back Service Endpoint component. By manipulating the X-Pingback/link argument, an attacker can trigger server-side request forgery (CWE-918), potentially causing the server to perform unintended HTTP requests. The vulnerability is remotely exploitable without authentication or user interaction. Although the exploit has been publicly disclosed, no vendor response or patch has been provided to date.

An attacker exploiting this SSRF vulnerability could cause the affected Typecho server to send crafted HTTP requests to internal or external systems. This may lead to information disclosure or interaction with internal services not normally accessible externally. The CVSS score of 6.9 (medium severity) reflects limited but significant impact potential. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded and no official fix is available, users should consider applying temporary mitigations such as disabling or restricting the Ping Back Service Endpoint if possible, or filtering and validating incoming X-Pingback/link headers to prevent malicious input. Monitor official channels for any future patches or advisories.