MSFM Server-Side Request Forgery Vulnerability

A server-side request forgery (SSRF) vulnerability has been identified in MSFM versions prior to 2025.01.01. The issue arises in the file/download component, allowing attackers to manipulate server-side requests and potentially access internal resources or services.

Impact

Exploitation of this vulnerability allows for server-side request forgery, where an attacker can make the server send requests on its behalf. This could be used to access internal services, files, or metadata that are not normally exposed to the outside world.