Description

A flaw has been found in EnzoVezzaro mcp-dominican-layer up to 39dd373786712650097ad31db27d5c477c8f9c82. The affected element is the function axios.get of the file src/index.ts of the component parse-csv tool. This manipulation of the argument csvUrl causes server-side request forgery. The attack is possible to be carried out remotely. The exploit has been published and may be used. This product adopts a rolling release strategy to maintain continuous delivery. Therefore, version details for affected or updated releases cannot be specified. The project was informed of the problem early through an issue report but has not responded yet.

Executive Summary

Technical Details

Mitigations

References

Additional Metadata

{
  "score": "6.3",
  "pubDate": "2026-08-13T22:17:19.483Z",
  "pubdate": "2026-08-13T22:17:19.483Z",
  "executiveSummary": "A Server-Side Request Forgery (SSRF) vulnerability has been identified in the EnzoVezzaro mcp-dominican-layer project, specifically within the parse-csv tool component up to commit 39dd373786712650097ad31db27d5c477c8f9c82. This security flaw stems from insufficient validation of user-supplied input passed to the axios.get function inside the src/index.ts file. Consequently, a remote, unauthenticated attacker can manipulate the csvUrl argument to force the underlying server to execute arbitrary HTTP GET requests toward internal or external destinations. The realization of this vulnerability poses severe risk implications, including unauthorized access to internal network resources, metadata services, and sensitive backend systems that are normally shielded from the public internet. Because the software utilizes a rolling release model, specific version numbers for affected states are undefined, and public exploits are already available in the wild, increasing the urgency for defensive intervention despite the vendor's lack of response to early disclosure reports.",
  "technicalDetails": "The vulnerability is rooted in the insecure handling of external parameters within the src/index.ts file of the parse-csv tool component in EnzoVezzaro mcp-dominican-layer up to commit 39dd373786712650097ad31db27d5c477c8f9c82. The root cause is the direct, unvalidated ingestion of the csvUrl argument into the axios.get function without enforcing strict URL parsing, allowlisting, or scheme validation.\nThe attack flow proceeds as follows: First, a remote, unauthenticated attacker crafts a malicious payload targeting the parse-csv tool interface by supplying a manipulated URI via the csvUrl parameter. Instead of a legitimate CSV file location, the attacker provides a URL pointing to sensitive internal endpoints, such as loopback addresses (127.0.0.1), local network services, or cloud instance metadata services (e.g., AWS IMDS at 169.254.169.254). Second, the application processes the request and executes the axios.get function using the attacker-controlled URL without restriction. Third, the server initiates an outbound HTTP request from its own network context to the specified destination. Finally, depending on how the application handles the response from axios.get, the attacker may harvest internal data, cause denial of service via resource exhaustion, or interact with vulnerable internal microservices that trust requests originating from localhost.\nNetwork exposure is fully remote, requiring no prior authentication or administrative privileges to trigger the vulnerable code path. The post-exploitation impact includes unauthorized data exfiltration, internal network reconnaissance, and potential pivot points into deeper segments of the host organization's infrastructure."
}