An unauthenticated Server-Side Request Forgery vulnerability in Ground Station allows attackers to compromise sensitive internal resources.

The application is susceptible to CWE-918 (Server-Side Request Forgery). An unauthenticated attacker can manipulate the software to send requests to unintended locations, potentially accessing internal services or metadata.

This vulnerability carries a CVSS score of 8.6, reflecting its high severity. Successful exploitation could lead to unauthorized access to internal network infrastructure or sensitive data that is not exposed to the public internet, posing a significant risk to organizational confidentiality.

Immediate Action: Update to Ground Station version 0.6.0 or later to apply the necessary security patch.

Proactive Monitoring: Monitor network traffic for unusual outbound requests originating from the Ground Station server, especially those targeting internal IP addresses or local services.

Compensating Controls: Implement a strict egress filtering policy on the server to restrict outbound connections to known, authorized endpoints.

Public Exploit Available: No confirmed public exploit in the available data.

Given the high CVSS score and the nature of the vulnerability, administrators should prioritize updating the software immediately. Ensuring the application is patched to version 0.6.0 is the most effective method for neutralizing the risk posed by this SSRF flaw.