Threats tagged 'ghsa-g33v-9g6g-xm9p'

A server-side request forgery (SSRF) vulnerability exists in the adafap api-mcp component, specifically in the customAxios function within app/api/proxy/route.ts. The vulnerability allows remote attackers to manipulate the url argument, potentially causing the server to make unintended requests. The product uses a rolling release strategy, so specific affected versions are not provided. The issue was reported early but has not yet received a response from the project. The CVSS score is 7.3, indicating a medium severity level.