| 제목 | houtini-ai seo-crawler-mcp 2.1.5 Server‑Side Request Forgery |
|---|
| 설명 | A Server-Side Request Forgery (SSRF) vulnerability exists in the run_seo_audit tool of houtini-ai/seo-crawler-mcp, where user-controlled URLs are passed directly to the Crawlee HTTP crawler without validation (src/core/CrawlOrchestrator.ts:147). The vulnerable data flow begins when an MCP client sends a request with a malicious URL parameter, which passes through src/index.ts:173 and src/tools/run-seo-audit.ts:30 before triggering an HTTP request at the crawler execution point. Dynamic testing with MCP-Inspector confirmed exploitability by successfully accessing a localhost web service on port 8001, with response content saved to the local SQLite database. This vulnerability (CVSS 7.5 HIGH) enables attackers to access internal services, scan private networks (10.x.x.x, 172.16.x.x, 192.168.x.x), steal cloud metadata credentials from x.x.x.x, and bypass firewall restrictions. In cloud deployments, attackers can retrieve IAM role credentials leading to complete account compromise. CodeQL static analysis failed to detect this vulnerability because HTTP requests are made through the third-party Crawlee library rather than direct fetch() calls, with complex multi-layer data flow making taint tracking difficult. Remediation requires implementing URL validation to block localhost addresses, private IP ranges, and cloud metadata endpoints before passing user input to the crawler, affecting all versions up to commit 18ca435a3437d3c3699a10a42976d96667fef732. |
|---|
| 원천 | ⚠️ https://github.com/Net-defense/public_exp/issues/1 |
|---|
| 사용자 | Lululu (UID 101009) |
|---|
| 제출 | 2026. 09. 04. AM 05:52 (2 개월 ago) |
|---|
| 모더레이션 | 2026. 10. 11. AM 10:34 (1 month later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 416565 [houtini-ai seo-crawler-mcp 까지 2.1.5 Crawler CrawlOrchestrator.ts run_seo_audit 권한 상승] |
|---|
| 포인트들 | 20 |
|---|