The sourcecache expansion module in MISP Modules (misp-modules) has a Server-Side Request Forgery (SSRF) vulnerability. Authenticated users with permission to create or modify 'link' or 'url' attributes can submit crafted URLs that cause the MISP server to make HTTP requests to internal or sensitive endpoints. This can lead to information disclosure from internal services, including cloud metadata and local files. The vulnerability requires authenticated access and affects the handling of URLs without validation.