Description
A vulnerability was found in KS-GEN-AI jira-mcp-server 0.2.0. This affects the function axios.get of the file src/index.ts of the component add_attachment_from_public_url. The manipulation of the argument imageUrl results in server-side request forgery. The attack requires a local approach. The project was informed of the problem early through an issue report but has not responded yet.
CVSS 5.3EPSS 0.10300000000000001%Risque 0.53
Voir la source- Publication
- 2026-08-09 21:16:59
- Dernière modification
- 2026-08-10 21:17:22
- Vecteur
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L