Threats tagged 'ghsa-6fh8-4v8j-r4gw'

NocteDefensor LudusMCP version 1.0.24 contains a server-side request forgery (SSRF) vulnerability in the read_range_config component, specifically in the src/tools/rangeConfig.ts file. The vulnerability arises from manipulation of the 'Source' argument, which can be exploited remotely. The project has been informed but has not yet responded or issued a fix. The CVSS score is 6.3, indicating a medium severity impact.