CyberRota Analysis
AI-GeneratedA server-side request forgery vulnerability exists in the GitHub API Handler's githubRequest function within cosmicstack-labs mercury-agent versions up to 1.1.13, allowing remote attackers to manipulate request paths. This flaw could lead to unauthorized access to internal services or sensitive data. Organizations using affected versions should prioritize patching or mitigating this vulnerability to protect their systems from potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A flaw has been found in cosmicstack-labs mercury-agent up to 1.1.13. Affected by this vulnerability is the function githubRequest of the file src/utils/github.ts of the component GitHub API Handler. This manipulation of the argument path causes server-side request forgery. Remote exploitation of the attack is possible. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.