Threats tagged 'ghsa-wmf6-8cmx-6fp6'

A server-side request forgery (SSRF) vulnerability exists in dmitriiweb article-scraper-mcp version 1.0.0 in the fetch_article function of news_scraper_mcp/server.py. The vulnerability allows remote attackers to manipulate the url argument to induce the server to make unintended requests. The vulnerability has a CVSS score of 6.3 and is classified as low severity. The issue was reported early to the project but no response or patch has been provided yet. Exploit code is publicly available, but no known active exploitation in the wild has been reported.