SSRF in enterprise wiki software

Summary

The link preview service does not adequately restrict destination addresses. An attacker can send requests to internal network resources and the cloud instance metadata endpoint.

Impact

Temporary cloud credentials can be stolen and internal systems discovered.

Recommendation

Update and enable additional protection for instance metadata (such as IMDSv2).