EUVD-2026-58517
GHSA-w8xr-v3ff-6585
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
SSRF requires low-privilege endpoint access (PR:L per CVSS 4.0 source); scope unchanged as no subsequent system impact is evidenced; no availability impact from request forgery alone.
Primary rating from Vendor (vuldb).
CVSS VectorVendor: vuldb
Lifecycle Timeline
1DescriptionCVE.org
A vulnerability was found in EnzoVezzaro mcp-dominican-layer up to 39dd373786712650097ad31db27d5c477c8f9c82. This affects the function parse-pdf of the file src/index.ts of the component PDF Parsing. Performing a manipulation of the argument pdfUrl results in server-side request forgery. It is possible to initiate the attack remotely. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.
AnalysisAI
Server-side request forgery in EnzoVezzaro's mcp-dominican-layer MCP server (all versions through commit 39dd373786712650097ad31db27d5c477c8f9c82) allows low-privileged remote attackers to manipulate the pdfUrl argument within the parse-pdf function, causing the server to issue arbitrary outbound HTTP requests to internal or external resources under attacker control. A public proof-of-concept has been disclosed via the GitHub issue tracker, lowering the exploitation bar, though the CVSS 4.0 base score of 2.1 reflects constrained impact. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires low-privilege authenticated access to the mcp-dominican-layer service sufficient to invoke the parse-pdf function - confirmed by PR:L in the CVSS 4.0 vector. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:L/UI:N) confirms network-accessible exploitation with low complexity and no special attack prerequisites, requiring only low-level authenticated access to invoke the vulnerable endpoint - consistent with a typical SSRF pattern against an API service. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | No vendor-released patch has been identified at time of analysis - the maintainer had not responded to the responsible disclosure issue (https://github.com/EnzoVezzaro/mcp-dominican-layer/issues/3) as of the report date. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-918 – Server-Side Request Forgery (SSRF)
View allShare
External POC / Exploit Code
Leaving vuln.today