Progress MarkLogic Server is vulnerable to a server-side request forgery flaw that could allow an authenticated attacker to perform unauthorized actions within the network.

This vulnerability is a Server-Side Request Forgery (CWE-918) flaw. It requires low privileges (authenticated) to successfully exploit, allowing an attacker to manipulate the server into making unintended requests to internal or external resources.

The vulnerability carries a CVSS score of 8.5, reflecting its high severity and potential for significant impact. Successful exploitation could lead to unauthorized access to internal services, data exfiltration, or the exploitation of internal systems that are otherwise protected from the public internet.

Immediate Action: Update MarkLogic Server to the versions specified in the vendor security alert to patch the SSRF vulnerability.

Proactive Monitoring: Review web access logs for unusual request patterns, specifically those directed toward internal IP addresses or restricted service ports.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to inspect and block suspicious outbound requests or malformed parameters that may trigger SSRF.

Public Exploit Available: Unknown

Given the high CVSS severity and the potential for internal network compromise, organizations using MarkLogic Server must prioritize applying the provided security updates. Ensure that internal network segmentation remains robust to limit the potential reach of any successful SSRF attempt.