Threats tagged 'ghsa-pv8v-hxqm-72q3'

A path traversal vulnerability exists in ryanjoachim mcp-rtfm version 0.1.0 affecting the MCP Interface component's functions get_doc_content, read_doc, and update_doc. This vulnerability allows remote attackers with limited privileges to manipulate the docFile argument to access unauthorized files. Public exploit code is available. The vulnerability has a medium severity rating with a CVSS score of 6.3.