This vulnerability in Typecho up to version 1.3.0 allows an attacker to perform server-side request forgery by manipulating the X-Pingback/link argument in the Service::sendPingHandle function located in var/Widget/Service.php. The flaw resides in the Ping Back Service Endpoint component. Exploitation can be done remotely without any privileges or user interaction. The vendor was notified but has not issued any fix or advisory. No official remediation or patch is currently available, and the vulnerability has a CVSS 4.0 score of 6.9 (medium severity).

Successful exploitation allows an attacker to induce the server to make arbitrary HTTP requests, potentially leading to unauthorized internal network access or information disclosure. The vulnerability does not require authentication and can be triggered remotely. However, no known exploits in the wild have been reported to date.

No official patch or remediation is currently available from the vendor. Users should monitor vendor channels for updates. Until a fix is released, consider disabling or restricting access to the Ping Back Service Endpoint if feasible to reduce exposure. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.