إرسال #646674: MariaDB mcp V0.1.0 Unauthorized access vulnerabilityالمعلومات

عنوانMariaDB mcp V0.1.0 Unauthorized access vulnerability
الوصفThe authentication mechanism (such as JWT, API Key, Basic Auth) is not implemented for the SSE interface in server.py, resulting in an attacker directly operating the MPC service through the SSE protocol without any authentication.
المصدر⚠️ https://github.com/MariaDB/mcp/issues/17
المستخدم
 Yu_Bao (UID 89348)
ارسال03/09/2025 05:20 AM (1 سنة منذ)
الاعتدال13/09/2025 09:33 PM (11 days later)
الحالةمكرر
إدخال VulDB323507 [MariaDB MCP 0.1.0 SSE Service الكشف عن المعلومات]
النقاط0

Interested in the pricing of exploits?

See the underground prices here!