CWE-918: Server-Side Request Forgery
The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.
Also known as XSPA, SSRF.
A kind of CWE-441 Unintended Proxy or Intermediary.
From the CWE List. © The MITRE Corporation.
Newest
- 1panel-dev maxkbMaxKB: SSRF via sandbox network hook bypass5.0 Medium
krayin/laravel-crmPackagistWebkul Krayin CRM has Server-Side Request Forgery (SSRF)8.5 High- No product listedHummerRisk Video File Download URL ServerService.java ServerService.addServer server-side request forgery5.1 Medium
- espocrmEspoCRM: SSRF via DNS Rebinding in Attachment fromImageUrl Endpoint Allows Internal Network Access3.5 Low
- No product listedDbGate REST/GraphQL openApiDriver.ts apiServerUrl1 server-side request forgery5.3 Medium
- espocrmEspoCRM has authenticated SSRF via internal-host validation bypass using alternative IPv4 notation4.3 Medium
- apache skywalking mcpApache SkyWalking MCP: Server-Side Request Forgery via SW-URL Header in MCP Server7.1 High
- foxit pdf services apiServer-Side Request Forgery (SSRF) via URL Parameter in Foxit PDF Services API8.5 High
- astrbotdevs astrbotAstrBotDevs AstrBot API Endpoint post_data.get server-side request forgery5.3 Medium
- deepwisdom metagptFoundationAgents MetaGPT common.py decode_image server-side request forgery5.3 Medium
- stiofansisland userswp – front-end login form, user registration, user profile & members directory plugin for wpUsersWP <= 1.2.58 - Authenticated (Subscriber+) Server-Side Request Forgery via 'uwp_crop' Parameter5.0 Medium
rembgPyPIrembg server is vulnerable to Server-Side Request Forgery (SSRF) and a weak default CORS configuration4.3 Medium- getarcane arcaneArcane Unauthenticated SSRF with Conditional Response Reflection in Template Fetch Endpoint7.2 High
- geonodeGeoNode SSRF via Service Registration5.3 Medium
- geonodeGeoNode < 4.4.5, 5.0.2 SSRF via Document Upload5.3 Medium
- lin-snow ech0Ech0 before 4.4.3 SSRF via DNS Resolution Bypass5.1 Medium
- axios, red hat cryostat 4, gatekeeper 3 +63 more +65 moreAxios has Unrestricted Cloud Metadata Exfiltration via Header Injection Chain4.8 Medium
- gitroom postiz, gitroomhq postiz-app +1 morePostiz has Server-Side Request Forgery via Redirect Bypass in /api/public/stream8.2 High
- chartbrewChartbrew has SSRF in API Data Connection - No IP Validation on User-Provided URLs7.8 High
- chamilo lms, chamilo-lms +1 moreServer-Side Request Forgery (SSRF) in Chamilo LMS7.7 High
- mervinpraison praisonaiagentsPraisonAIAgents has SSRF via unvalidated URL in `web_crawl` httpx fallback7.1 High
- fastgptFastGPT has Unauthenticated SSRF in /api/core/app/mcpTools/runTool via missing CHECK_INTERNAL_IP default5.3 Medium
- openclawOpenClaw assertPublicHostname web-fetch.ts server-side request forgery6.3 Medium
- mervinpraison praisonaiagentsPraisonAIAgents has SSRF and Local File Read via Unvalidated URLs in web_crawl Tool7.7 High
- mervinpraison praisonaiPraisonAI has Server-Side Request Forgery via Unvalidated webhook_url in Jobs API7.2 High
- b3log siyuanSiYuan Affected by Zero-Click NTLM Hash Theft and Blind SSRF via Mermaid Diagram Rendering8.7 High
- sonicverse radio audio streaming stack, sonicverse-eu audiostreaming-stack +1 moreSonicverse has Server-Side Request Forgery via user-controlled URLs in dashboard API client9.9 Critical
- openclawOpenClaw < 2026.4.8 - Strict Browser SSRF Bypass via Playwright Redirect Handling4.8 Medium
- openclawOpenClaw < 2026.4.8 - Server-Side Request Forgery Policy Bypass via Interaction-Triggered Navigation4.8 Medium
- openclawOpenClaw < 2026.4.8 - Server-Side Request Forgery in QQ Bot Media Fetch Paths5.1 Medium
- makeplane planePlane has a Server-Side Request Forgery (SSRF) in Favicon Fetching7.7 High
- axios, red hat cluster observability operator 1.5.0, cryostat 4 +60 more +62 moreAxios has a NO_PROXY Hostname Normalization Bypass that Leads to SSRF6.3 Medium
- atototo api-lab-mcpatototo api-lab-mcp HTTP http-server.ts test_http_endpoint server-side request forgery6.9 Medium
- jizhicmsJizhicms v2.5.4 is vulnerable to Server-Side Request Forgery (SSRF) in User Evaluation, Message,...9.1 Critical
- bigsk1 openai-realtime-uibigsk1 openai-realtime-ui API Proxy Endpoint server.js server-side request forgery5.3 Medium
- czlonkowski n8n-mcpn8n-MCP has an Authenticated SSRF via instance-URL header in multi-tenant HTTP mode8.5 High
- inventreeInvenTree has SSRF via Remote Image Download — No IP/Hostname Validation on remote_image URLs5.3 Medium
- agentfront frontmcp, frontmcp mcp-from-openapi, @frontmcp adapters +3 more +5 moreFrontMCP Affected by SSRF via $ref Dereferencing in Untrusted OpenAPI Specifications7.5 High
- zammadZammad has a Server-side request forgery (SSRF) via webhooks8.3 High
- redhat quay, red hat mirror registry for red hat openshift, mirror registry for red hat openshift 2 +8 more +10 moreMirror-registry: quay: server-side request forgery in proxy cache upstream registry configuration5.2 Medium
- elastic kibanaServer-Side Request Forgery (SSRF) in Kibana One Workflow Leading to Information Disclosure6.8 Medium
- red hat mirror registry for red hat openshift, redhat quay, red hat mirror registry for red hat openshift 2 +6 more +8 moreMirror-registry: quay: quay: server-side request forgery via log export functionality6.5 Medium
- podigeeWordPress Podigee plugin <= 1.4.0 - Server Side Request Forgery (SSRF) vulnerability5.4 Medium
- brecht visual link previewWordPress Visual Link Preview plugin <= 2.3.0 - Server Side Request Forgery (SSRF) vulnerability6.0 Medium
- sonaar mp3 audio player for music, radio & podcast by sonaarWordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 5.11 - Server Side Request Forgery (SSRF) vulnerability5.4 Medium
- global payments globalpayments woocommerceWordPress GlobalPayments WooCommerce plugin <= 1.18.0 - Server Side Request Forgery (SSRF) vulnerability5.4 Medium
- getty images imagesWordPress Getty Images plugin <= 4.1.0 - Server Side Request Forgery (SSRF) vulnerability6.4 Medium
- nelio software contentWordPress Nelio Content plugin <= 4.3.1 - Server Side Request Forgery (SSRF) vulnerability4.9 Medium
- seedprod coming soon page, under construction & maintenance mode by seedprodWordPress Coming Soon Page, Under Construction & Maintenance Mode by SeedProd plugin <= 6.19.8 - Server Side Request Forgery (SSRF) vulnerability5.5 Medium
- ibm security verify access, security verify access container, verify identity access +1 more +3 moreSecurity Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access7.2 High
- Show moreLoading…