19 matches found
Server-side Request Forgery (SSRF)
Overview @frontmcp/sdk is a FrontMCP SDK Affected versions of this package are vulnerable to Server-side Request Forgery SSRF in the initialize process. An attacker can access internal network resources or sensitive local files by submitting a crafted OpenAPI specification containing malicious $r...
8.7CVSS5.8AI score0.00319EPSS
SaveExploits1References2
20