Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2026-19339

aliyun alibabacloud-dataworks-mcp-server initResources.ts ReadResourceRequestSchema server-side request forgery

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulDB

Description

A security flaw has been discovered in aliyun alibabacloud-dataworks-mcp-server up to 1.0.43. The impacted element is the function ReadResourceRequestSchema of the file src/resources/initResources.ts. The manipulation of the argument request.params.uri results in server-side request forgery. The attack may be launched remotely. The project was informed of the problem early through an issue report but has not responded yet.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

aliyun alibabacloud-dataworks-mcp-server

  • 1.0.0affected
  • 1.0.1affected
  • 1.0.2affected
  • 1.0.3affected
  • 1.0.4affected
  • 1.0.5affected
  • 1.0.6affected
  • 1.0.7affected
  • 1.0.8affected
  • 1.0.9affected
  • 1.0.10affected
  • 1.0.11affected
  • 1.0.12affected
  • 1.0.13affected
  • 1.0.14affected
  • 1.0.15affected
  • 1.0.16affected
  • 1.0.17affected
  • 1.0.18affected
  • 1.0.19affected
  • 1.0.20affected
  • 1.0.21affected
  • 1.0.22affected
  • 1.0.23affected
  • 1.0.24affected
  • 1.0.25affected
  • 1.0.26affected
  • 1.0.27affected
  • 1.0.28affected
  • 1.0.29affected
  • 1.0.30affected
  • 1.0.31affected
  • 1.0.32affected
  • 1.0.33affected
  • 1.0.34affected
  • 1.0.35affected
  • 1.0.36affected
  • 1.0.37affected
  • 1.0.38affected
  • 1.0.39affected
  • 1.0.40affected
  • 1.0.41affected
  • 1.0.42affected
  • 1.0.43affected

References