Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
awwaiid mcp-server-taskwarrior index.ts server.setRequestHandler command injection
Vulnerability Description
A security vulnerability has been detected in awwaiid mcp-server-taskwarrior up to 1.0.1. This impacts the function server.setRequestHandler of the file index.ts. Such manipulation of the argument Identifier leads to command injection. The attack must be carried out locally. The exploit has been disclosed publicly and may be used. The name of the patch is 1ee3d282debfa0a99afeb41d22c4b2fd5a3148f2. Applying a patch is advised to resolve this issue. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Vulnerability Type
在命令中使用的特殊元素转义处理不恰当(命令注入)
Vulnerability Title
TaskWarrior MCP Server 命令注入漏洞
Vulnerability Description
TaskWarrior MCP Server是Brock Wilcox个人开发者的一个任务管理工具服务器。 TaskWarrior MCP Server 1.0.1及之前版本存在命令注入漏洞，该漏洞源于文件index.ts中的函数server.setRequestHandler对参数Identifier的错误操作导致命令注入，可能导致本地攻击。
CVSS Information
N/A
Vulnerability Type
N/A