Lucene search
+L

29 matches found

EUVD
EUVD
•added 2025/12/10 12:30 a.m.•20 views

EUVD-2025-202327

Fetch MCP Server has a Server-Side Request Forgery SSRF vulnerability...

5.8AI score0.00448EPSS
SaveExploits1References5
Github Security Blog
Github Security Blog
•added 2025/12/10 12:30 a.m.•23 views

Fetch MCP Server has a Server-Side Request Forgery (SSRF) vulnerability

fetch-mcp v1.0.2 and before is vulnerable to Server-Side Request Forgery SSRF vulnerability, which allows attackers to bypass private IP validation and access internal network resources...

7.5CVSS5.9AI score0.00448EPSS
SaveExploits1References5Affected Software1
OSV
OSV
•added 2025/12/09 10:16 p.m.•19 views

CVE-2025-65513

fetch-mcp v1.0.2 and before is vulnerable to Server-Side Request Forgery SSRF vulnerability, which allows attackers to bypass private IP validation and access internal network resources...

7.5CVSS5.9AI score0.00448EPSS
SaveExploits1References2
NVD
NVD
•added 2025/12/09 10:16 p.m.•25 views

CVE-2025-65513

fetch-mcp v1.0.2 and before is vulnerable to Server-Side Request Forgery SSRF vulnerability, which allows attackers to bypass private IP validation and access internal network resources...

7.5CVSS0.00448EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/09 12:00 a.m.•3 views

CVE-2025-65513: Server-Side Request Forgery (SSRF)

fetch-mcp v1.0.2 and before is vulnerable to Server-Side Request Forgery SSRF vulnerability, which allows attackers to bypass private IP validation and access internal network resources...

7.5CVSS5.9AI score0.00448EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2025/12/09 12:00 a.m.•4 views

CVE-2025-65513

fetch-mcp v1.0.2 and before is vulnerable to Server-Side Request Forgery SSRF vulnerability, which allows attackers to bypass private IP validation and access internal network resources...

5.9AI score0.00448EPSS
SaveExploits1References2
CVE
CVE
•added 2025/12/09 12:00 a.m.•54 views

CVE-2025-65513

fetch-mcp (also referred to as mcp-fetch-server ) versions v1.0.2 and before are vulnerable to a Server-Side Request Forgery (SSRF) . The root cause is improper private IP validation within the is_ip_private() function, which fails to perform its intended blocking. This allows an attacker to bypa...

7.5CVSS5.9AI score0.00448EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2025/12/09 12:00 a.m.•46 views

CVE-2025-65513

fetch-mcp v1.0.2 and before is vulnerable to Server-Side Request Forgery SSRF vulnerability, which allows attackers to bypass private IP validation and access internal network resources...

0.00448EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2025/12/09 12:00 a.m.•21 views

PT-2025-50273

Name of the Vulnerable Software and Affected Versions fetch-mcp versions 1.0.2 and earlier Description The software is susceptible to a Server-Side Request Forgery SSRF issue. This allows attackers to circumvent private IP validation and gain access to internal network resources. Recommendations...

7.5CVSS5.8AI score0.00448EPSS
SaveExploits1References4
Rows per page
Query Builder