This vulnerability in KS-GEN-AI jira-mcp-server 0.2.0 allows an attacker with local access to manipulate the imageUrl argument passed to axios.get in the add_attachment_from_public_url component, resulting in server-side request forgery. This could enable the attacker to make unauthorized requests from the server to internal or external resources. The issue was reported early to the project, but no vendor response or patch is currently available.

An attacker with local access can exploit this SSRF vulnerability to induce the server to send crafted requests to arbitrary URLs. This may lead to unauthorized internal network scanning or access to internal services, depending on the server environment and network configuration. The vulnerability does not require user interaction and has low complexity but limited scope due to the local access requirement.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or issued a fix, users should restrict local access to the jira-mcp-server and monitor for suspicious activity related to the add_attachment_from_public_url functionality. Avoid exposing the vulnerable version (0.2.0) in untrusted environments until a patch or official mitigation is available.