The host is installed with cortex through 2.1.3 and is prone to a server side request forgery vulnerability. A flaw is present in the application, which fails to handle a issue in the cortex unshortenlink analyzer. Successful exploitation allows attackers to do port scans on localhost and intranet hosts.