1 matches found
CVE-2026-77242: Time-of-check Time-of-use (TOCTOU) Race Condition
MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, validateurlforssrf checks a hostname's resolved addresses, but Requests and urllib3 resolve the hostname again when connecting. A caller can use a short-lived DNS answer that is publi...
7.5CVSS5.8AI score0.003EPSS
SaveExploits1References7
20