2 matches found
CKAN MCP Server: MQA server allowlist bypass via unanchored regex (`isValidMqaServer`)
Summary The ckangetmqaquality and ckangetmqaqualitydetails tools restrict their serverurl argument to dati.gov.it via a regular expression. The regex is anchored only at the start and places no boundary after the host, so any URL whose host merely begins with dati.gov.it — or that uses dati.gov.i...
5.3CVSS6.1AI score0.00384EPSS
SaveExploits0References5Affected Software1
20