Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
•added 2026/09/02 2:52 p.m.•23 views

CKAN MCP Server: MQA server allowlist bypass via unanchored regex (`isValidMqaServer`)

Summary The ckangetmqaquality and ckangetmqaqualitydetails tools restrict their serverurl argument to dati.gov.it via a regular expression. The regex is anchored only at the start and places no boundary after the host, so any URL whose host merely begins with dati.gov.it — or that uses dati.gov.i...

5.3CVSS6.1AI score0.00384EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder