A Server-Side Request Forgery (SSRF) vulnerability exists in Bagisto versions up to 2.3.15 in the Downloadable Link Handler component's copy function. This vulnerability allows an attacker with some privileges to manipulate server requests remotely. The vendor has acknowledged the issue and plans to fix it in upcoming releases. The vulnerability has a medium severity rating with a CVSS score of 6.3. Public exploit code is available, but no confirmed exploitation in the wild has been reported.