| 제목 | sdcb chats 1.12.0 SSRF |
|---|
| 설명 | An authenticated server-side request forgery (SSRF) vulnerability exists in the MCP tool discovery endpoint. Any authenticated user can make the backend initiate HTTP requests to an arbitrary URL supplied in the request, including internal or localhost-reachable services. This can be used to probe internal network services, access private endpoints, or interact with cloud metadata services from the server context.
https://github.com/sdcb/chats |
|---|
| 원천 | ⚠️ https://github.com/yaowenxiao721/Poc/blob/main/sdcb-chats/chats-poc-1.md |
|---|
| 사용자 | yaowenxiao (UID 82929) |
|---|
| 제출 | 2026. 07. 02. AM 10:48 (2 개월 ago) |
|---|
| 모더레이션 | 2026. 08. 31. AM 11:46 (2 months later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 397285 [sdcb chats 까지 1.12.0 fetch-tools Endpoint McpController.cs McpController 권한 상승] |
|---|
| 포인트들 | 20 |
|---|