Promptshopmcp
Monthly
Server-side request forgery in PromptShopMCP's Image-Toolkit-MCP-Server exposes internal network resources via the download_image function in server.py, where insufficient validation of the image_url argument allows an authenticated remote attacker to direct the server to make arbitrary HTTP requests. All commits up to 5bc0cd17358e19a5415d11a531088170d7b81452 are affected, and a public exploit exists via GitHub issue #4. The vendor has been notified but has not responded, and no patch is available; the rolling release model further complicates fixed-version remediation.
Server-side request forgery in PromptShopMCP's Image-Toolkit-MCP-Server exposes internal network resources via the download_image function in server.py, where insufficient validation of the image_url argument allows an authenticated remote attacker to direct the server to make arbitrary HTTP requests. All commits up to 5bc0cd17358e19a5415d11a531088170d7b81452 are affected, and a public exploit exists via GitHub issue #4. The vendor has been notified but has not responded, and no patch is available; the rolling release model further complicates fixed-version remediation.