CWE-918: Server-Side Request Forgery
The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.
Also known as XSPA, SSRF.
A kind of CWE-441 Unintended Proxy or Intermediary.
From the CWE List. © The MITRE Corporation.
Newest
- prince radio playerWordPress Radio Player plugin <= 2.0.91 - Server Side Request Forgery (SSRF) vulnerability5.4 Medium
- fogprojectFOG vulnerable to unauthenticated SSRF via `/fog/service/getversion.php`7.5 High
- linuxfoundation rekorRekor affected by Server-Side Request Forgery (SSRF) via provided public key URL5.3 Medium
- themegoods photomeWordPress PhotoMe theme < 5.7.2 - Server Side Request Forgery (SSRF) vulnerability5.4 Medium
- craig hewitt seriously simple podcastingWordPress Seriously Simple Podcasting plugin <= 3.14.1 - Server Side Request Forgery (SSRF) vulnerability4.4 Medium
- wbolt.com imgspiderWordPress IMGspider plugin <= 2.3.12 - Server Side Request Forgery (SSRF) vulnerability4.9 Medium
- smartdatasoft electrician - electrical service wordpressWordPress Electrician - Electrical Service WordPress theme <= 5.6 - Server Side Request Forgery (SSRF) vulnerability5.4 Medium
- wp messiah frontis blocksWordPress Frontis Blocks plugin <= 1.1.5 - Server Side Request Forgery (SSRF) vulnerability7.2 High
- marco van wieren wpo365WordPress WPO365 plugin <= 40.0 - Server Side Request Forgery (SSRF) vulnerability6.4 Medium
- marco milesi anac xml viewerWordPress ANAC XML Viewer plugin <= 1.8.2 - Server Side Request Forgery (SSRF) vulnerability4.9 Medium
- smartdatasoft pool servicesWordPress Pool Services theme <= 3.3 - Server Side Request Forgery (SSRF) vulnerability5.4 Medium
- apryse html2pdfA Local File Inclusion (LFI) and a Server-Side Request Forgery (SSRF) vulnerability was found in...7.5 High
- backstage, linuxfoundation backstage\/backend defaults +1 moreBackstage has a Possible SSRF when reading from allowed URL's in `backend.reading.allow`3.5 Low
- red hat build of keycloak, build of keycloak 26.4, build of keycloak 26.4.11 +3 more +5 moreOrg.keycloak.protocol.oidc: blind server-side request forgery (ssrf) in keycloak oidc dynamic client registration via jwks_uri5.8 Medium
- chainlitChainlit < 2.9.4 SQLAlchemy Data Layer SSRF via /project/element8.3 High
- axllent mailpitMailpit Vulnerable to Server-Side Request Forgery (SSRF) via HTML Check API5.8 Medium
- kozea weasyprint, red hat ansible automation platform 2 +1 moreWeasyPrint Vulnerable to Server-Side Request Forgery (SSRF) Protection Bypass via HTTP Redirect7.5 High
- xiweicheng tms, teamwork management system +1 morexiweicheng TMS HtmlUtil.java summary server-side request forgery5.3 Medium
- andy moyle church adminChurch Admin <= 5.0.28 - Authenticated (Administrator+) Blind Server-Side Request Forgery via 'audio_url' Parameter2.2 Low
- aiven-open bigquery-connector-for-apache-kafkaArbitrary File Read in Google BigQuery Sink connector7.7 High
- the nu html checker nu html checker, validator +1 moreNu Html Checker (validator.nu) - Restriction bypass vulnerability allowing local SSRF6.9 Medium
- thelibrarian the librarian, thelibrarian.io +1 moreCVE-2026-06137.5 High
- torstenbulk dk pdf – wordpress pdf generatorDK PDF – WordPress PDF Generator <= 2.3.0 - Authenticated (Author+) Server-Side Request Forgery5.0 Medium
- naver lucy-xss-filterlucy-xss-filter before commit 7c1de6d allows an attacker to induce server-side HEAD requests to...6.1 Medium
- svelte adapter-node, kit +1 moreSvelteKit Denial of service and possible SSRF when using prerendering8.4 High
- umbraco, umbraco cms +1 moreUmbraco v8.14.1 - 'baseUrl' SSRF6.9 Medium
- sonatype nexus repositoryNexus Repository 3 - Server-Side Request Forgery in Proxy Repository Configuration6.2 Medium
- elastic kibana, red hat logging subsystem for red hat openshift, jboss enterprise application platform 8 +3 more +5 moreExternal Control of File Name or Path and Server-Side Request Forgery (SSRF) in Kibana Google Gemini Connector8.6 High
- daschmi getcontentfromurlGetContentFromURL <= 1.0 - Authenticated (Contributor+) Server-Side Request Forgery via 'url' Shortcode Attribute7.2 High
- microsoft sharepoint enterprise server 2016, sharepoint server 2019, sharepoint server subscription edition +1 more +3 moreMicrosoft SharePoint Information Disclosure Vulnerability5.4 Medium
- fortinet fortisandboxA Server-Side Request Forgery (SSRF) vulnerability [CWE-918] vulnerability in Fortinet...3.4 Low
- hubert hubInsecure permissions in Hubert Imoveis e Administracao Ltda Hub v2.0 1.27.3 allows authenticated...6.5 Medium
- metabaseMetabase channel test endpoint can reach internal local addresses2.1 Low
- linuxfoundation fulcioFulcio vulnerable to Server-Side Request Forgery (SSRF) via MetaIssuer Regex Bypass5.8 Medium
- marceljm featured image from url (fifu)Featured Image from URL (FIFU) <= 5.3.1 - Authenticated (Contributor+) Server-Side Request Forgery via 'fifu_input_url'4.3 Medium
- ghostGhost has SSRF via External Media Inliner5.1 Medium
- mmaitre314 picklescanpicklescan - Arbitrary File Read via Unsafe Pickle Deserialization8.7 High
- joinmastodon mastodonMastodon has SSRF Protection bypass7.1 High
- nk nk themes helperWordPress nK Themes Helper plugin <= 1.7.9 - Server Side Request Forgery (SSRF) vulnerability6.4 Medium
- inim electronics s.r.l. smartliving smartlan/g/siINIM Electronics Smartliving SmartLAN/G/SI <=6.x Unauthenticated SSRF via GetImage6.9 Medium
- danny-avila librechatLibreChat is vulnerable to Server-Side Request Forgery due to missing restrictions9.1 Critical
- miniflux project miniflux, miniflux v2 +1 moreMiniflux Media Proxy SSRF via /proxy endpoint allows access to internal network resources6.5 Medium
- eng knowage, knowagelabs knowage-server +1 moreKnowage is vulnerable to blind server-side request forgery (SSRF)6.3 Medium
- minnur external mediaWordPress External Media plugin <= 1.0.36 - Server Side Request Forgery (SSRF) vulnerability4.9 Medium
- invoiceninjainvoiceninja Migration Import Import.php copy server-side request forgery5.1 Medium
- axllent mailpitMailpit Proxy Endpoint is Vulnerable to Server-Side Request Forgery (SSRF)5.8 Medium
- xagio seo – ai powered seoXagio SEO <= 7.1.0.30 - Authenticated (Subscriber+) Server-Side Request Forgery6.4 Medium
- linuxfoundation spinnakerSpinnaker vulnerable to SSRF due to improper restrictions on http from user input7.9 High
- craftcms cms, craft cms +1 moreCraft CMS vulnerable to Server-Side Request Forgery (SSRF) via GraphQL Asset Upload Mutation5.0 Medium
- evershopevershop allows unauthenticated attackers to force server to initiate HTTP request via "GET /images" API6.5 Medium
- Show moreLoading…