CyberRota Analysis
AI-GeneratedThe vulnerability affects the MCP server for Atlassian products, specifically allowing unauthorized access to restricted tools due to improper validation of tool permissions during request dispatching. This flaw enables clients to invoke excluded read, write, or delete operations, bypassing configured least-privilege restrictions, which could lead to significant data exposure or manipulation. Organizations using affected versions prior to 0.22.0 should prioritize updating to the latest version to mitigate potential risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, ENABLED_TOOLS and TOOLSETS are applied when tools are listed but are not rechecked when a tools/call request is dispatched. A client that knows a hidden tool name can directly invoke excluded read, write, or delete tools despite the operator's configured least-privilege restrictions. The advisory traces the vulnerable input and processing flow through ENABLED_TOOLS, TOOLSETS, tools/list, tools/call, and _call_tool_mcp, which identify the affected entry points, controls, and code paths. This issue is fixed in version 0.22.0.
Related CVEs
Other vulnerabilities affecting the same vendor(s)