CWE-918: Server-Side Request Forgery
The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.
Also known as XSPA, SSRF.
A kind of CWE-441 Unintended Proxy or Intermediary.
From the CWE List. © The MITRE Corporation.
Newest
- feiyuchuixue sz-boot-parentfeiyuchuixue sz-boot-parent download server-side request forgery2.3 Low
- makeplane planePlane Vulnerable to Full Read SSRF via Favicon Fetching in "Add Link" Feature7.7 High
- esm esm.shesm.sh has SSRF localhost/private-network bypass in `/http(s)` module route8.6 High
- esm esm.shesm.sh is vulnerable to full-response SSRF8.7 High
- dfactory responsive lightbox & galleryResponsive Lightbox & Gallery <= 2.7.1 - Authenticated (Author+) Server-Side Request Forgery via Remote Library Image Upload5.0 Medium
- remyandrade website link extractorSourceCodester Website Link Extractor URL file_get_contents server-side request forgery5.3 Medium
- dgtlmoon changedetection.io, webtechnologies changedetection +1 morechangedetection.io Vulnerable to Server-Side Request Forgery (SSRF) via Watch URLs8.6 High
- joinmastodon mastodonMastodon has SSRF via unvalidated FASP Provider base_url4.6 Medium
- beyond altec doclinkDocLink .NET Remoting Unauthenticated Arbitrary File Read/Write RCE10.0 Critical
- wwbn avideoAVideo has Authenticated Server-Side Request Forgery via downloadURL in aVideoEncoder.json.php8.6 High
- payloadcms payloadPayload has Server-Side Request Forgery (SSRF) in External File URL Uploads6.5 Medium
- craftcms cms, craft cms +1 moreCloud Metadata SSRF Protection Bypass via IPv6 Resolution5.7 Medium
- datalinkdc dinkyDataLinkDC dinky Flink Proxy Controller FlinkProxyController.java proxyUba server-side request forgery5.3 Medium
- withastro astro, astro \@astrojs\/node +1 moreAstro has Full-Read SSRF in error rendering via Host: header injection6.9 Medium
- erzhongxmu jeewmserzhongxmu JEEWMS UEditor getRemoteImage.jsp server-side request forgery6.9 Medium
- tiandy video surveillance system 视频监控平台Tiandy Video Surveillance System 视频监控平台 CLSBODownLoad.java downloadImage server-side request forgery5.3 Medium
- jeecg bootJeecgBoot uploadImgByHttp server-side request forgery5.3 Medium
- ellite wallosWallos: SSRF via Redirect Bypass in Logo/Icon URL Fetch7.7 High
- opensiftOpenSift: SSRF risk in URL ingestion endpoint7.1 High
- phpmoadminphpMoAdmin 1.1.5 Cross-Site Request Forgery via moadmin.php5.3 Medium
- openclawOpenClaw hardened cron webhook delivery against SSRF6.9 Medium
- laborator oxygenWordPress Oxygen theme <= 6.0.8 - Server Side Request Forgery (SSRF) vulnerability7.2 High
- opentext xm faxSSRF vulnerability have been discovered in OpenText™ XM Fax5.3 Medium
- sillytavernSillyTavern has Server-Side Request Forgery (SSRF) via Asset Download Endpoint that Allows Reading Internal Services7.1 High
- spipSPIP < 4.4.9 Blind Server-Side Request Forgery via Syndicated Sites5.3 Medium
- hyland alfresco community (transform core), alfresco transformation service (enterprise), alfresco transform core +1 more +3 moreHyland Alfresco Transformation Service Argument Injection RCE9.3 Critical
- hyland alfresco community (transform core), alfresco transformation service (enterprise), alfresco transform core +1 more +3 moreHyland Alfresco Transformation Service SSRF6.9 Medium
- appsheet web (main server)Arbitrary File Read and SSRF in Google AppSheet8.5 High
- totalsoft ts pollWordPress TS Poll plugin <= 2.5.5 - Server Side Request Forgery (SSRF) vulnerability4.4 Medium
- kaizencoders url shortifyWordPress URL Shortify plugin <= 1.12.3 - Server Side Request Forgery (SSRF) vulnerability5.5 Medium
- alobaidi extend linkWordPress Extend Link plugin <= 2.0.0 - Server Side Request Forgery (SSRF) vulnerability4.9 Medium
- burhan nasir smart auto upload imagesWordPress Smart Auto Upload Images plugin <= 1.2.2 - Server Side Request Forgery (SSRF) vulnerability7.2 High
- zhutoutoutousan worldquant-minerzhutoutoutousan worldquant-miner URL ssrf_proxy.py server-side request forgery6.3 Medium
- printful integration for woocommercePrintful Integration for WooCommerce <= 2.2.11 - Authenticated (Contributor+) Server-Side Request Forgery6.4 Medium
- softvision webpdfSoftVision webPDF before 10.0.2 is vulnerable to Server-Side Request Forgery (SSRF). The PDF...9.1 Critical
- github enterprise serverIncorrect Authorization vulnerability was identified in GitHub Enterprise Server that allowed unauthorized merging of pull requests7.1 High
- openclawOpenClaw < 2026.2.14 - SSRF via Feishu Extension Media Fetching6.3 Medium
- huggingface smolagentshuggingface smolagents LocalPythonExecutor requests.post server-side request forgery5.3 Medium
- stellarwp kadence blocks — page builder toolkit for gutenberg editorGutenberg Blocks with AI by Kadence WP <= 3.6.1 - Authenticated (Contributor+) Server-Side Request Forgery via 'endpoint' Parameter4.3 Medium
- openclawOpenClaw < 2026.2.14 - Server-Side Request Forgery in Tlon Extension Authentication6.3 Medium
- netapp storagegrid (formerly storagegrid webscale)StorageGRID (formerly StorageGRID Webscale) versions prior to 11.9.0.12 and 12.0.0.4 with Single...7.1 High
- openclawOpenClaw has a SSRF guard bypass via full-form IPv4-mapped IPv6 (loopback / metadata reachable)7.5 High
- openclawOpenClaw Gateway tool allowed unrestricted gatewayUrl override7.6 High
- openclawOpenClaw < 2026.2.2 - SSRF via Attachment Media URL Hydration6.3 Medium
- ibm concertMultiple Vulnerabilities in IBM Concert Software.5.4 Medium
- cern indicoIndico has Server-Side Request Forgery (SSRF) in multiple places6.9 Medium
openclawnpmOpenClaw affected by SSRF in Image Tool Remote Fetch7.6 High- rocketsoftware trufusion enterpriseRocket TRUfusion Enterprise through 7.10.4.0 uses a reverse proxy to handle incoming connections....7.9 High
- No product listedGeekAI net_handler.go Download server-side request forgery5.3 Medium
- cskefucskefu Endpoint MediaController.java server-side request forgery5.3 Medium
- Show moreLoading…