This vulnerability (CWE-918) in MarkLogic Server before versions 11.3.6 and 12.0.3 enables an authenticated low-privileged user to perform SSRF attacks that bypass protections on cloud instance metadata endpoints. Successful exploitation can disclose sensitive cloud credentials and potentially allow attackers to compromise cloud resources accessible to the server instance. The vulnerability is confirmed in versions 11.0.0 and 12.0.0. No vendor advisory or patch information is currently available, and no known exploits are reported in the wild.

An attacker with low-privileged authenticated access can bypass security controls protecting cloud metadata endpoints, leading to disclosure of cloud credentials. This can result in compromise of cloud resources accessible to the MarkLogic Server host instance. The impact includes confidentiality, integrity, and availability loss as indicated by the CVSS vector (C:H/I:H/A:H).

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to authenticated users and monitor for suspicious activity related to metadata endpoint access. Avoid exposing MarkLogic Server to untrusted networks where possible.