Tag
The mcp-atlassian package contains a path traversal vulnerability allowing an authenticated MCP caller to exfiltrate arbitrary server-local files to Jira or Confluence via attachment upload tools.