Skip to content
OpenAdvisories

Vendor

presenton

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Medium 6.5

    Presenton < 0.8.8-beta - Authentication Bypass of Session Auth via Unprotected MCP Endpoint

    Presenton before 0.8.8-beta bundles an MCP server that, on server/Docker deployments configured with session authentication (AUTH_USERNAME/AUTH_PASSWORD), is reachable unauthenticated at /mcp because the nginx front-end does not apply the auth_request gate to…