This vulnerability, identified as CWE-918 SSRF, exists in Tammersoft Shared Files versions up to 1.7.69. It enables an attacker with low privileges to cause the server to send crafted requests to internal or external systems, potentially exposing sensitive information or altering data integrity. The CVSS 3.1 vector indicates network attack vector, low attack complexity, low privileges required, no user interaction, and scope change with partial confidentiality and integrity impact but no availability impact. No known exploits are reported in the wild, and no vendor advisory or patch information is currently available.

An attacker with low privileges can exploit this SSRF vulnerability to make the server perform unauthorized requests, which may lead to partial disclosure of sensitive information and partial modification of data integrity. There is no impact on availability. No active exploitation is known at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, monitor vendor communications for updates. No specific mitigations are provided by the vendor at this time.