FlareSolverr prior to version 3.4.7 contains a server‑side request forgery flaw in its /v1 API endpoint, allowing a remote attacker to force the service to fetch arbitrary URLs. This flaw is mapped to CWE‑918 and can result in the disclosure of internal resources or other sensitive information that the server does not normally expose to the public. The vulnerability permits the attacker to retrieve data from any reachable web resource, potentially exposing internal systems, configuration files, or other protected data.

Users running FlareSolverr version 3.4.6 or earlier are affected. The issue is confined to the /v1 API endpoint of the application, and any instance that exposes this endpoint to external traffic is vulnerable. Because the product’s vendor information is not specified in the advisory, the focus is on the FlareSolverr deployment itself and its versioning.

The CVSS score of 7.5 indicates a high impact level, but the EPSS score of less than 1% suggests that exploitation is currently unlikely. This vulnerability is not listed in the CISA KEV catalog. Based on the description, it is inferred that the /v1 endpoint can be accessed without authentication, which increases the exposure of the attack surface. The likely attack vector is a remote network request to the publicly reachable /v1 endpoint, where the attacker supplies an arbitrary URL for the server to fetch. Successful exploitation could lead to data leakage or enable the attacker to probe internal network resources that are otherwise shielded from the external world.