Skip to content
OpenAdvisories

Vendor

TencentCloudBase

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • High 7.3

    TencentCloudBase CloudBase-MCP open-url API Endpoint interactive-server.ts openUrl server-side request forgery

    A vulnerability was found in TencentCloudBase CloudBase-MCP up to 2.17.0. Affected is the function openUrl of the file mcp/src/interactive-server.ts of the component open-url API Endpoint. The manipulation of the argument req.body.url results in server-side r…