Threats tagged 'ghsa-fhw4-v2hr-j5m2'

A server-side request forgery (SSRF) vulnerability exists in feedmob fm-mcp-servers version 0.0.3 in the downloadReport function of the Download Endpoint component. The vulnerability arises from manipulation of the downloadUrl argument and can only be exploited from a local environment. The project has been informed but has not yet responded or issued a fix. The vulnerability has a CVSS score of 5.3, indicating low severity.