Skip to content
OpenAdvisories

Vendor

KS-GEN-AI

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 5.3

    KS-GEN-AI jira-mcp-server add_attachment_from_public_url index.ts axios.get server-side request forgery

    A vulnerability was found in KS-GEN-AI jira-mcp-server 0.2.0. This affects the function axios.get of the file src/index.ts of the component add_attachment_from_public_url. The manipulation of the argument imageUrl results in server-side request forgery. The a…