An authenticated Server-Side Request Forgery vulnerability in Plane versions prior to 1.2.2 poses a significant risk of internal data exfiltration and cloud metadata theft.

This is a Full Read Server-Side Request Forgery (SSRF) vulnerability located in the Add Link feature. The flaw permits an authenticated attacker with standard user privileges to force the application to perform arbitrary GET requests against the internal network and return the full response body.

The ability to perform SSRF against internal resources can lead to the compromise of sensitive internal information and cloud environment metadata. Given the CVSS score of 7.7, this vulnerability is classified as High severity, reflecting the potential for unauthorized access to internal infrastructure that is otherwise protected from the public internet.

Immediate Action: Upgrade the Plane installation to version 1.2.2 or later immediately to incorporate the provided security fix.

Proactive Monitoring: Review server access logs for unusual outbound requests originating from the application server, particularly those directed toward internal IP ranges or cloud metadata service addresses (e.g., 169.254.169.254).

Compensating Controls: Implement strict egress filtering on the application server to prevent connections to unauthorized internal network segments and sensitive management endpoints.

Public Exploit Available: No

The vulnerability in Plane represents a critical point of entry for lateral movement within a network or cloud environment. Security teams should prioritize the update to version 1.2.2 to close this SSRF vector, as it provides a direct path for attackers to bypass perimeter security and access internal data.