The vulnerability in Lara Dashboard (up to version 1.3.1) is a server-side request forgery (CWE-918) in the POST /api/admin/builder/markdown/fetch endpoint. Authenticated users can supply malicious URLs that the server fetches without validating the host or restricting redirects. This enables attackers to access internal network resources and sensitive cloud metadata, potentially exposing IAM credentials. The CVSS 3.1 score is 7.1 (High), reflecting network attack vector, low attack complexity, required privileges, no user interaction, and high confidentiality impact with limited integrity impact.

An attacker with authentication can exploit this SSRF vulnerability to read arbitrary URLs from the server side, including internal HTTP services and cloud metadata endpoints. This can lead to disclosure of sensitive information such as IAM credentials, which may facilitate further compromise of the environment.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the vulnerable endpoint to trusted users only and monitor for suspicious activity involving the POST /api/admin/builder/markdown/fetch endpoint.