Ccccccctfi

**Name of the Vulnerable Software and Affected Versions** horizon921 mcpilot version 0.1.0 **Description** A server-side request forgery (SSRF) exists in the MCP API Call Endpoint within the file `client/src/app/api/mcp/call/route.ts`. This issue allows a remote attacker to manipulate the `serverBaseUrl` argument to trigger unauthorized requests from the server. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** ishayoyo excel-mcp versions prior to 1.0.3 **Description** A path traversal issue exists within the `read file/write file` component in the `src/index.ts` file. A remote attacker can exploit this by manipulating the `filePath` or `outputPath` arguments. Path traversal is a technique used to access files and directories that are stored outside the web root folder by manipulating variables that reference files with dot-dot-slash (../) sequences. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. Restrict the use of the `filePath` and `outputPath` arguments in the `read file/write file` component to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** hiraishikentaro wezterm-mcp version 0.1.0 **Description** Remote OS command injection is possible through the manipulation of the `pane id` variable within the `request.params.arguments` argument. This issue occurs in a function located in the `src/wezterm executor.ts` file, specifically within the `switch pane/write to specific pane` component. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** indrasishbanerjee aem-mcp-server versions up to b5f833aef9b5dfd17a5991b3b18a8a11edbdc583 **Description** A server-side request forgery (SSRF) issue exists within the Axios Request Flow component. This occurs when the `getAssetMetadata()` function in the `src/mcp-server.ts` file fails to properly handle the `assetPath` argument, allowing a remote attacker to manipulate the request. SSRF is a flaw that allows an attacker to induce the server-side application to make requests to an unintended location. **Recommendations** As a temporary workaround, restrict the use of the `assetPath` argument within the `getAssetMetadata()` function to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** hekmon8 Jenkins-server-mcp version 0.1.0 **Description** A remote server-side request forgery (SSRF) exists in the `jobPath()` function within the `src/index.ts` file of the `get build status/get build log/trigger build` component. SSRF is a flaw that allows an attacker to induce the server-side application to make requests to an unintended location. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting the use of the `jobPath()` function until a patch is available.

**Name of the Vulnerable Software and Affected Versions** j3k0 mcp-google-workspace versions prior to 89c091ecf8b9f9c7291d1af0b1966e271f86551c **Description** Improper access controls exist within the MCP Gmail Tool component. A remote attacker can exploit this issue by manipulating the `saveToDisk()` function located in the `src/tools/gmail.ts` file. **Recommendations** Install patch 89c091ecf8b9f9c7291d1af0b1966e271f86551c. As a temporary workaround, restrict the use of the `saveToDisk()` function until the patch is applied.

**Name of the Vulnerable Software and Affected Versions** huangjunsen0406 xiaozhi-mcphub versions prior to 1.0.4 **Description** A path traversal issue exists in the `src/controllers/dxtController.ts` file. A remote attacker can exploit this by manipulating the `manifest.name` argument, allowing unauthorized access to files or directories outside the intended folder. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** gyoridavid short-video-maker versions prior to 1.3.5 **Description** A path traversal flaw exists in the REST API component within the `src/server/routers/rest.ts` file. A remote attacker can exploit this by manipulating the `req.params.tmpFile` argument, allowing unauthorized access to files or directories outside the intended folder. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.