Description

A vulnerability was found in EnzoVezzaro mcp-dominican-layer up to 39dd373786712650097ad31db27d5c477c8f9c82. This affects the function parse-pdf of the file src/index.ts of the component PDF Parsing. Performing a manipulation of the argument pdfUrl results in server-side request forgery. It is possible to initiate the attack remotely. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.

Executive Summary

Technical Details

Mitigations

References

Additional Metadata

{
  "score": "6.3",
  "pubDate": "2026-08-13T22:17:19.663Z",
  "pubdate": "2026-08-13T22:17:19.663Z",
  "executiveSummary": "A Server-Side Request Forgery (SSRF) vulnerability has been identified in the EnzoVezzaro mcp-dominican-layer project, specifically within the PDF Parsing component.\nThe vulnerability affects versions up to commit 39dd373786712650097ad31db27d5c477c8f9c82 and stems from improper handling of the pdfUrl argument within the parse-pdf function located in src/index.ts.\nAn unauthenticated remote attacker can exploit this security flaw to induce the vulnerable server into executing arbitrary outbound HTTP or network requests.\nSuccessful exploitation of this Server-Side Request Forgery vulnerability can lead to unauthorized data exposure, internal service discovery, interaction with internal APIs, and potential lateral movement within the hosting network infrastructure.\nThe exploit vector is publicly available, increasing the risk of active exploitation, while the maintainers have not yet responded to early issue reports or provided an official patch.\nImmediate defensive measures are required to restrict outbound network connections and validate input parameters until an official software update is released.",
  "technicalDetails": "The vulnerability is classified as a Server-Side Request Forgery (SSRF) residing in the PDF Parsing component of the EnzoVezzaro mcp-dominican-layer application, specifically affecting the parse-pdf function defined in the src/index.ts source file.\nThe root cause of the vulnerability is the lack of proper input validation, sanitization, and URL schema restriction on the pdfUrl argument passed to the function.\nWhen processing user-supplied input, the application fails to enforce allowlists or validate whether the target URL points to an external, public resource or an internal, restricted network destination.\nThe attack flow begins when a remote attacker sends a maliciously crafted payload containing a targeted internal IP address, loopback address (e.g., 127.0.0.1), link-local address, or cloud metadata service endpoint within the pdfUrl parameter.\nThe server processes the parse-pdf request and initiates an outbound network connection using the supplied URL without restricting the destination scheme or IP range.\nNetwork exposure is fully remote, as the vulnerable parse-pdf endpoint is accessible across the network interface without requiring prior authentication or privileged access credentials.\nUpon establishing the connection, the underlying component retrieves data from the specified target and processes the response, potentially leaking internal service banners, configuration data, or sensitive metadata back to the attacker.\nPost-exploitation impact includes unauthorized interaction with internal microservices, bypassing perimeter firewalls via the server proxying mechanism, and potential compromise of internal network assets dependent on the privileges assigned to the hosting server."
}