Chaskiq 2.0.3 contains an unauthenticated SSRF flaw that lets an attacker send any URL to the /oembed endpoint. The internal service FetchLinkCardService accepts the url parameter, follows redirects, and bypasses TLS verification, allowing the server to fetch arbitrary resources. By targeting loopback, private, or cloud‑metadata addresses the attacker can obtain internal page titles and descriptions, leaking sensitive internal information.

The vulnerability affects the Chaskiq platform version 2.0.3 and earlier releases that expose the /oembed endpoint without authentication. No newer versions are listed in the data.

The score of 6.9 indicates moderate severity. Although the EPSS score is not provided, the vulnerability is publicly documented and not flagged in the CISA KEV catalog. Attackers only need to send a crafted request to the public /oembed endpoint; no credentials are required. If exploited, the server can contact internal networks, potentially revealing internal endpoints or metadata, and may be used as a stepping stone for further compromise.