CyberRota Analysis
AI-GeneratedThe adenot mcp-google-search component versions up to 0.3.1 are vulnerable due to a server-side request forgery (SSRF) flaw in the read_webpage function, which can be exploited by manipulating the URL argument during local execution. This vulnerability poses a medium risk, as it could allow attackers to make unauthorized requests from the server, potentially leading to data exposure or further attacks. Organizations using this component should prioritize applying the patch f071d491b685011ca04e8ab8d586fc65f86bcee1 to mitigate the risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was determined in adenot mcp-google-search up to 0.3.1. Impacted is an unknown function of the file src/index.ts of the component read_webpage. Executing a manipulation of the argument url can lead to server-side request forgery. The attack is restricted to local execution. This patch is called f071d491b685011ca04e8ab8d586fc65f86bcee1. It is advisable to implement a patch to correct this issue.