Description (CNA)
Vulnerable to DNS rebinding attacks when using SSE (http://b/499408790). During the beta phase, we implemented `allowed-origins` and `allowed-hosts` flags to align with MCP security guidelines. However, the hardcoded `Access-Control-Allow-Origin: *` header in the SSE initialization handler was inadvertently retained. This vulnerability specifically impacts users connecting via Toolbox using SSE under specification v2024-11-05.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Google / MCP Toolbox for Databases | affected 0 before PR 3054 (Fix CORS bypass) |
CWE
CWE-942
References
- https://github.com/googleapis/mcp-toolbox/issues/3053
- https://github.com/googleapis/mcp-toolbox/pull/3054
ADP enrichment
No English description supplied.
No references supplied.