Threats tagged 'ghsa-6xqm-jw5j-72jf'

A path traversal vulnerability exists in ZachHandley ZMCPTools up to version 0.2.2 in the MCP Log Resource Handler component. The flaw involves improper handling of the dirname argument in the src/managers/ResourceManager.ts file, allowing remote attackers to manipulate file paths. The vulnerability has a CVSS score of 6.3 (medium severity) and has been publicly disclosed. No patch or vendor response has been reported yet.