Server-Side Request Forgery via SW-URL Header vulnerability in Apache SkyWalking MCP. This issue affects Apache SkyWalking MCP: 0.1.0. Users are recommended to upgrade to version 0.2.0, which fixes this issue.
Fix
Patch, vendor advisory and mitigation references on NVD 1
- https://lists.apache.org/thread/v0k1xyzzbtnpyrwxwyn36pbspr8rhjnr Vendor Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 7.1 · apacheNVD modified 2026-10-26 21:10
Affected (CPE criteria) 1
cpe:2.3:a:apache:skywalking_mcp:*:*:*:*:*:*:*:*