Mcp Florence2
Monthly
Server-side request forgery in jkawamoto mcp-florence2 (all versions through 0.3.13) enables remote low-privilege attackers to manipulate the `src` argument of the `get_images` function, causing the server to issue arbitrary HTTP requests to attacker-controlled destinations - including internal network services and cloud metadata endpoints. A public proof-of-concept is available via GitHub issue #59, lowering the exploitation bar significantly. This vulnerability is not currently listed in the CISA KEV catalog, but the publicly available exploit and network-accessible attack vector make it relevant to any deployment where the server host has access to sensitive internal resources.
Server-side request forgery in jkawamoto mcp-florence2 (all versions through 0.3.13) enables remote low-privilege attackers to manipulate the `src` argument of the `get_images` function, causing the server to issue arbitrary HTTP requests to attacker-controlled destinations - including internal network services and cloud metadata endpoints. A public proof-of-concept is available via GitHub issue #59, lowering the exploitation bar significantly. This vulnerability is not currently listed in the CISA KEV catalog, but the publicly available exploit and network-accessible attack vector make it relevant to any deployment where the server host has access to sensitive internal resources.