Vendor
KS-GEN-AI
1 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
Medium 5.3
KS-GEN-AI jira-mcp-server add_attachment_from_public_url index.ts axios.get server-side request forgery
A vulnerability was found in KS-GEN-AI jira-mcp-server 0.2.0. This affects the function axios.get of the file src/index.ts of the component add_attachment_from_public_url. The manipulation of the argument imageUrl results in server-side request forgery. The a…