Threats tagged 'ghsa-6m57-vrcv-v9j4'

A vulnerability exists in Mendix Studio Pro 11 versions from 11.15.0 up to but not including 11.16.0, and in version 11.12 from 11.12.6 up to but not including 11.12.7. The MCP Server component does not properly restrict its HTTP listener to the loopback interface, potentially exposing it to remote network access. This could allow an attacker with network access to interact with the MCP Server remotely, leading to high impact on confidentiality, integrity, and availability.