Threats tagged 'ghsa-7mp2-fv3h-3g72'

A Cross-Site Request Forgery (CSRF) vulnerability exists in Mendix Studio Pro 11 MCP Server versions >=11.15.0 <11.16.0 and >=11.12.6 <11.12.7. The server does not properly validate Content-Type and Origin headers on incoming HTTP requests, which could allow a malicious web page to trick a user's browser into sending unauthorized requests that execute unintended actions on the local MCP Server.