Description (CNA)
A vulnerability was detected in elie mcp-project 0.1.0. The affected element is the function search_papers of the file research_server.py. The manipulation of the argument topic results in path traversal. Attacking locally is a requirement. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| elie / mcp-project | affected 0.1.0 |
CWE
CWE-22
References
- https://vuldb.com/vuln/359971
- https://vuldb.com/vuln/359971/cti
- https://vuldb.com/submit/803083
- https://github.com/elie/mcp-research-server/issues/1
ADP enrichment
No English description supplied.
No references supplied.