Description

A vulnerability was detected in dmitriiweb article-scraper-mcp 1.0.0. This vulnerability affects the function fetch_article of the file news_scraper_mcp/server.py. The manipulation of the argument url results in server-side request forgery. The attack may be performed from remote. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.

Executive Summary

Technical Details

Mitigations

References

Additional Metadata

{
  "score": "6.3",
  "pubDate": "2026-08-10T00:17:09.677Z",
  "pubdate": "2026-08-10T00:17:09.677Z",
  "executiveSummary": "A Server-Side Request Forgery (SSRF) vulnerability has been identified in the dmitriiweb article-scraper-mcp 1.0.0 product. The security flaw specifically resides within the fetch_article function inside the news_scraper_mcp/server.py file. This vulnerability enables remote attackers to manipulate the url argument, leading to arbitrary server-side request generation. The resulting impact exposes the underlying hosting infrastructure to unauthorized network reconnaissance and potential internal resource access. Exploitation can be executed remotely without prior authentication, posing a severe risk to deployments operating within trusted internal networks or cloud environments. The vulnerability is currently disclosed publicly via an issue report, and the project maintainers have not yet provided an official patch or security response.",
  "technicalDetails": "The vulnerability stems from insufficient input validation and lack of URL sanitization within the fetch_article function implemented in the news_scraper_mcp/server.py script of article-scraper-mcp version 1.0.0. When a client supplies a crafted input via the url parameter, the application processes and initiates an outbound HTTP request to the specified destination without enforcing strict allowlisting or restricting target IP space. This architectural oversight permits an unauthenticated remote attacker to coerce the server into querying arbitrary endpoints.\nThe attack flow proceeds as follows: First, the adversary constructs a malicious payload containing an internal network address (such as localhost, private RFC 1918 IP blocks, or cloud metadata service endpoints like 169.254.169.254) targeted via supported protocols such as HTTP or HTTPS. Second, the attacker transmits this crafted payload to the exposed server interface interacting with the news_scraper_mcp/server.py module. Third, the fetch_article function executes the request, dispatching outbound traffic from the local network interface of the host running the article-scraper-mcp service. Finally, the application may inadvertently return response data or error states to the user, facilitating side-channel information disclosure or enabling the exploitation of internal services that lack perimeter authentication controls.\nNetwork exposure is fully remote, and the exploitation vector does not require any administrative privileges or pre-existing user sessions. The post-exploitation impact includes unauthorized interaction with internal microservices, access to cloud metadata services leading to credential theft, and internal port scanning across protected network perimeters."
}