3 matches found
GHSA-G5R6-GV6M-F5JV mcp-atlassian: Arbitrary file read via missing path validation in confluence_upload_attachment
Summary confluenceuploadattachment passes filepath directly to openfilepath, "rb" with no path validation. Any authenticated MCP client — or an AI agent manipulated via prompt injection — can read any file the server process can access and exfiltrate it to Confluence as an attachment. Details Roo...
mcp-atlassian: Arbitrary file read via missing path validation in confluence_upload_attachment
Summary confluenceuploadattachment passes filepath directly to openfilepath, "rb" with no path validation. Any authenticated MCP client — or an AI agent manipulated via prompt injection — can read any file the server process can access and exfiltrate it to Confluence as an attachment. Details Roo...
