SSRF Vulnerability in ddfourtwo sentry-selfhosted-mcp

The ddfourtwo sentry-selfhosted-mcp component version 0.4.0 is susceptible to a Server-Side Request Forgery (SSRF) vulnerability. The flaw exists within the raw_sentry_api component, where improper handling of the 'endpoint' argument allows remote, unauthenticated attackers to force the server to initiate arbitrary network requests to internal or external resources. Given the availability of a public exploit, there is a risk of unauthorized data access, network scanning, or interaction with internal services hosted within the same environment. As of the report date, no patch has been provided by the project maintainers. Defenders should assume that adversaries may leverage this vulnerability to bypass perimeter controls and probe internal network segments.

Impact

Successful exploitation allows remote attackers to conduct SSRF attacks, potentially leading to unauthorized interaction with internal APIs, metadata services, or sensitive backend infrastructure, effectively bypassing firewall rules and access control lists.

Recommendation

• Perform an inventory of all instances of sentry-selfhosted-mcp running version 0.4.0.
• Implement network-level segmentation to restrict the server's ability to reach internal management interfaces or sensitive internal subnets.
• Monitor web application logs for unexpected POST or GET requests to the raw_sentry_api component that include suspicious 'endpoint' values targeting local loopback (127.0.0.1) or internal CIDR blocks.
• If the application is not business-critical, restrict network access to the management endpoint or disable the service until an official patch is released by the maintainer.