| 标题 | 021is elvix-sdk 0.10.1 Server-Side Request Forgery |
|---|
| 描述 | A server-side request forgery (SSRF) vulnerability (CWE-918) has been identified in all MCP tools exposed by 021is elvix-sdk 0.10.1, commit 682cc8bbd631d692172e1d2856b238d073e88e5f. The default read-only mode exposes 24 tools, all of which are affected; administrative/non-read-only mode enables an additional 64 affected tools, for a total of 88. The shared MCP request handler in src/mcp/index.ts accepts an attacker-controlled path argument and passes it to new URL(path, baseUrl) without restricting the resulting scheme, host, or port. Supplying an absolute URL replaces the trusted baseUrl, after which the server sends the request with its configured Authorization: Bearer <apiKey> header. An attacker with access to the MCP interface can therefore make requests to loopback interfaces, internal services, cloud metadata endpoints, or attacker-controlled hosts and disclose the configured Elvix API key. A working exploit has demonstrated an arbitrary request to a local listener together with the Bearer credential. No fixed version is available at the time of reporting. |
|---|
| 来源 | ⚠️ https://github.com/Xh1Xxhg/public_exp/issues/4 |
|---|
| 用户 | Xh1Xxhg (UID 90906) |
|---|
| 提交 | 2026-08-27 03時59分 (2 月前) |
|---|
| 管理 | 2026-10-10 15時30分 (1 month later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 416197 [021is elvix-sdk 直到 0.10.1 MCP Request src/mcp/index.ts path 权限提升] |
|---|
| 积分 | 20 |
|---|