Description

A vulnerability was identified in feedmob fm-mcp-servers 0.0.3. Affected by this vulnerability is the function downloadReport of the file src/smadex-reporting/src/index.ts of the component Download Endpoint. The manipulation of the argument downloadUrl leads to server-side request forgery. The attack can only be performed from a local environment. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet.

Executive Summary

Technical Details

Mitigations

References

Additional Metadata

{
  "score": "5.3",
  "pubDate": "2026-08-14T02:16:24.747Z",
  "pubdate": "2026-08-14T02:16:24.747Z",
  "executiveSummary": "A Server-Side Request Forgery (SSRF) vulnerability has been identified within the downloadEndpoint component of feedmob fm-mcp-servers version 0.0.3.\nThe vulnerability resides in the downloadReport function located in the source file src/smadex-reporting/src/index.ts.\nBy manipulating the unsecured downloadUrl argument supplied to this function, a local attacker can coerce the vulnerable server into dispatching arbitrary outbound HTTP requests to internal or external destinations.\nThis behavior exposes internal network resources, metadata services, and backend systems that are otherwise shielded from direct external access.\nThe risk implication is significant as it compromises the network perimeter integrity of the host environment, potentially permitting unauthorized data exfiltration or interaction with internal microservices.\nExploitation requires local environment access to the targeted system, meaning the threat actor must already possess a foothold on the host or execution context where the service is running.\nPublicly available exploit material increases the likelihood of active exploitation, compounding the urgency for remediation, particularly since the vendor has not yet responded to early issue disclosures.",
  "technicalDetails": "The vulnerability is classified as a Server-Side Request Forgery (SSRF) stemming from improper input validation and lack of URL sanitization within the downloadReport function.\nThe affected component, specifically the downloadEndpoint implementation within src/smadex-reporting/src/index.ts in version 0.0.3, accepts a user-supplied parameter designated as downloadUrl.\nWhen the application processes this argument, it fails to implement strict allowlisting, schema validation, or domain restriction before initiating an outbound network connection using the supplied URL.\nThe attack flow proceeds when a local adversary supplies a maliciously crafted URI, such as a loopback address, internal IP address, or internal service endpoint, into the downloadUrl parameter.\nUpon invocation of the downloadReport function, the underlying HTTP client library in the Node.js environment blindly dereferences the parameter and executes a request on behalf of the application.\nBecause the request originates from the server itself, it bypasses standard network perimeter controls such as firewalls and Network Address Translation (NAT) rules that typically restrict direct client-to-backend communication.\nAuthentication and privilege requirements for exploitation are constrained by the necessity of local environment execution, allowing local system users or processes with access to the application interface to trigger the flaw.\nPost-exploitation impact includes the potential retrieval of sensitive internal configuration data, scanning of internal network topologies, interaction with unauthenticated administrative APIs, and potential execution of secondary requests against vulnerable internal services.\nThe root cause is a failure to implement robust URL parsing and validation mechanisms that ensure the destination URL resolves to authorized external resources only."
}