authorization
1 post.
- The MCP confused deputy problemDay 6 / 100 · AI cybersecurity
A hands-on MCP lab showed how a valid tenant key can still retrieve another tenant's project when the server never checks resource ownership.
View
1 post.
A hands-on MCP lab showed how a valid tenant key can still retrieve another tenant's project when the server never checks resource ownership.
Simply curious about the world, constantly building and breaking things for fun.
Browse
