The vulnerability arises from a server‑side request forgery that permits any authenticated user to set an arbitrary PanSou base URL without proper role checks. By configuring a malicious URL and invoking the probe routine, an attacker can cause the application server to send POST requests to internal network addresses and interpret distinct error responses as a proof‑of‑concept oracle for discovering internal hosts and ports.

The affected product is Mediary Scout, developed by fancydirty. All releases before the 2026.11.05 version are vulnerable; the 2026.11.05 release contains the fix.

The CVSS score is 5.3, indicating a moderate severity. No EPSS score is available and the vulnerability is not listed in the CISA KEV catalog. Exploitation requires an authenticated user with any role, so internal users could leverage the flaw to map internal services. Given the moderate risk and the absence of widespread exploitation reports, installers of vulnerable versions should prioritize remediation.