Skip to content
OpenAdvisories

Vendor

jae-jae

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Medium 6.3

    jae-jae fetcher-mcp URL Validation security-credentials fetch_urls server-side request forgery

    A vulnerability has been found in jae-jae fetcher-mcp up to 0.3.9. Impacted is the function fetch_url/fetch_urls of the file /latest/meta-data/iam/security-credentials/ of the component URL Validation. Such manipulation leads to server-side request forgery. I…