Vulnerability feed

Executive summary

The advisory says a vulnerability was detected in the designer-mcp server by 1999AZZAR, affecting versions up to 2.1.0. The text does not state how severe the flaw is or what the vendor recommends, and it gives no fixed version.

Technical summary

The advisory text is a copied GitHub repository page and does not describe the vulnerability class, attack vector, or preconditions. The only version information is 'up to 2.1.0', and no fixed version is stated. No CVSS score, workaround, mitigation, exploitation status, or detection guidance is stated. The page mentions a previously closed CWE-22 path traversal fix in get_reference (issue #14), but it does not link that fix to this advisory's vulnerability, so it should not be treated as the affected issue. Defenders should check the upstream project and the NVD entry for details.

Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source.

Summarized from github.com/1999AZZAR/designer-mcp

Impact if exploited

How it is exploited

Attack vector

Network

Attack complexity

Low

Attack requirements

None

Privileges required

Low

User interaction

None

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Affects

1999AZZAR1999AZZAR designer-mcp