This vulnerability in aliyun alibabacloud-dataworks-mcp-server affects versions up to and including 1.0.43. The issue is in the ReadResourceRequestSchema function, where improper handling of the request.params.uri parameter allows an attacker to perform server-side request forgery. This enables an attacker to make the server send crafted requests to internal or external systems, potentially bypassing network restrictions. The vulnerability was reported but the project has not yet responded or issued a fix.

An attacker can remotely exploit this SSRF vulnerability to induce the server to send unauthorized requests to internal or external resources. This may lead to information disclosure or interaction with internal services not otherwise accessible. The CVSS score of 5.3 indicates a medium severity impact with low attack complexity and no user interaction required. There are no known exploits in the wild currently.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or released a fix, users should monitor official channels for updates. Until a fix is available, consider implementing network-level controls to restrict outbound requests from the affected server and validate or sanitize inputs to the vulnerable function if possible.