Phying News
Curated security research, vulnerabilities, advisories and tools for practitioners.

Otto Support - Testing MCP Servers

Summary

Closing the otto-support series, the team uses nmap, a Nuclei template, and MCP Inspector to expose an authorization gap that lets any unprivileged user delete other users' tickets.
Published
Collected

original ↗

Related coverage

back