CWE-918: Server-Side Request Forgery
The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.
Also known as XSPA, SSRF.
A kind of CWE-441 Unintended Proxy or Intermediary.
From the CWE List. © The MITRE Corporation.
Newest
- sooperset mcp-atlassianMCP Atlassian is a Model Context Protocol (MCP): DNS-rebinding TOCTOU bypass of the SSRF fix (CVE-2026-27826): unauthenticated SSRF to cloud metadata6.5 Medium
- kimaiKimai has Server-Side Request Forgery in Invoice PDF Rendering via Markdown Image URLs5.3 Medium
- decolua 9router9router: Unauthenticated `/v1` proxy access via `Host`-header spoofing → open AI relay + SSRF8.2 High
- decolua 9router9router: Image prefetch DNS rebinding allows SSRF to internal services7.4 High
- red hat openshift ai 2.25, openshift ai 3.4 +1 moreGuardrails-detectors: guardrails-detectors: ssrf and local file read via user-supplied xml schema (xml-with-schema:)9.3 Critical
- mervinpraison praisonaiPraisonAI before 4.6.78 Unauthenticated SSRF via webhook_url6.9 Medium
- red hat openshift ai 2.25, openshift ai 3.3, openshift ai 3.4 +2 moreGuardrails-detectors: guardrails-detectors: ssrf and local file read via user-supplied xml schema (xml-with-schema:)9.3 Critical
- plugins360 all-in-one video galleryAll-in-One Video Gallery <= 4.8.5 - Authenticated (Subscriber+) Server-Side Request Forgery via 'vdl' Parameter6.4 Medium
- zhayujie cowagentzhayujie CowAgent Vision Tool vision.py _download_to_data_url server-side request forgery6.9 Medium
- sipeed picoclawSipeed PicoClaw Guarded Web Fetch Flow web.go WebFetchTool.Execute server-side request forgery5.3 Medium
- yeswikiYesWiki: Unauthenticated Server-Side Request Forgery via ActivityPub `Signature.keyId`8.3 High
- palo alto networks cloud ngfw, pan-os, prisma access +1 more +3 morePAN-OS: Server-Side Request Forgery Vulnerability in Management Web Interface4.7 Medium
- open-webui, openwebui open webui +1 moreopen-webui terminal proxy path traversal guard bypass via 9x encoded traversal7.7 High
- aerostackdev aerostack-mcpaerostackdev aerostack-mcp mcp-whatsapp upload_media server-side request forgery5.3 Medium
- premailer css parsercss_parser: SSRF and Local File Disclosure in `CssParser::Parser#read_remote_file`8.9 High
- pyloadpyLoad: SSRF guard bypass via IPv6 6to4/NAT64 transition wrappers of internal IPs4.9 Medium
- monsta limited of new zealand ftpMonsta FTP < 2.14.5 SSRF via IPv4-Mapped IPv6 Address Bypass7.7 High
- gradio-app gradioGradio < 6.20.0 - Open Redirect and SSRF via /gradio_api/file= endpoint4.9 Medium
- repomixrepomix - Server-Side Request Forgery via Unvalidated Repository URLs in POST /api/pack9.2 Critical
- oasdiffoasdiff does not enforce --allow-external-refs=false on the git-revision load path (SSRF / local file read)6.0 Medium
- labring fastgptFastGPT: SSRF in HTTP-tool OpenAPI schema importer via SwaggerParser $ref (bypasses the isInternalAddress guard)7.7 High
- @better-auth sso, better-auth, better-auth better auth +1 more +3 moreBetter Auth: Server-side request forgery via unvalidated OIDC endpoints on @better-auth/sso provider registration9.6 Critical
- localaiLocalAI - Server-Side Request Forgery via POST /models/apply9.2 Critical
- ondata ckan-mcp-server@aborruso/ckan-mcp-server: SSRF via base_url allows access to internal networks (Potential fix bypass of CVE-2026-33060)5.7 Medium
- nocobaseNocoBase 2.1.20 Server-Side Request Forgery via serverRequest wrapper5.1 Medium
- newapi new api, quantumnous new-api +1 moreNew API: SSRF Protection Bypass via Unresolved Hostname in Notification URLs7.7 High
- coollabsio coolifyCoolify: Server-Side Request Forgery via attacker-controlled GitHub App API URL4.3 Medium
- coollabsio coolifyCoolify: SSRF via S3 Storage Endpoint in testConnection()4.9 Medium
- coderCoder: Workspace agent API insecure redirect handling allowed cross-agent file read and write8.3 High
- dragonflyoss dragonflyDragonfly scheduler v1 gRPC unauthenticated SSRF via attacker-controlled PeerHost in DownloadTinyFile5.5 Medium
- flytohub flyto-coreFlyto2 Core: SSRF guard bypass via IPv6 transition addresses (IPv4-mapped / 6to4 / NAT64) in validate_url_ssrf7.1 High
- owncloud anti-virus for owncloud, 10 +1 moreAnti-Virus for ownCloud 10 is vulnerable to Server-Side Request Forgery (SSRF)9.1 Critical
- microsoft sharepoint, owncloud 10 +1 moreSharePoint for ownCloud 10 is vulnerable to Server-Side Request Forgery (SSRF)8.5 High
- apache camel, apache software foundation camel iggy +1 moreApache Camel Iggy: The inbound consumer maps externally-supplied Iggy message user-headers into the Exchange without a HeaderFilterStrategy, allowing injection of Camel control headers - enabling cont…7.5 High
- apache camel, apache software foundation camel atmosphere websocket +1 moreApache Camel Atmosphere Websocket: The inbound consumer maps externally-supplied WebSocket query parameters into the Exchange without a HeaderFilterStrategy, allowing injection of Camel control header…7.5 High
- apache camel, apache software foundation camel dns +1 moreApache Camel DNS: The dns.* and term Exchange header constants used non-Camel-prefixed names that bypass the HTTP header filter, allowing an HTTP client to influence internal behaviour9.1 Critical
- apache camelApache Camel: Camel-Solr: The SolrParam. and SolrField. Exchange header prefixes used non-Camel-prefixed names that bypass the HTTP header filter, allowing an HTTP client to inject Solr query paramete…9.1 Critical
- apache camel, apache software foundation camel vertx websocket +1 moreApache Camel Vertx Websocket: The inbound consumer maps externally-supplied WebSocket query and path parameters into the Exchange without a HeaderFilterStrategy, allowing injection of Camel control he…7.5 High
- aianytime awesome-mcp-serverAIAnytime Awesome-MCP-Server mcp-wiki/wiki-summary server.py server-side request forgery5.3 Medium
- gitea open source git serverSSRF via HTTP Redirect in Repository Migration6.5 Medium
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Spoofing Vulnerability5.4 Medium
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Spoofing Vulnerability7.4 High
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Spoofing Vulnerability6.5 Medium
- gitea open source git serverGitea webhook and migration allow-list filtering permits SSRF9.6 Critical
- eclipse foundation theia, the eclipse foundation eclipse theia +1 moreIn Eclipse Theia since version 1.26.0, the backend /services/request-service RPC accepts an attacker-controlled URL from any client connected to the standard /services messaging endpoint, performs the…8.5 High
- vjinfotech wp import export liteWP Import Export Lite <= 3.9.30 - Authenticated (Administrator+) Server-Side Request Forgery via 'file_url' Parameter5.5 Medium
- microsoft azure openai, azure open ai +1 moreAzure OpenAI Elevation of Privilege Vulnerability9.9 Critical
- microsoft entra provisioning serviceMicrosoft Entra Provisioning Service Elevation of Privilege Vulnerability9.9 Critical
- estrellaxd auto bangumiAutoBangumi < 3.2.8 - SSRF via /api/v1/setup/test-downloader6.9 Medium
- lobehubLobeChat < 2.2.10-canary.18 - SSRF via importFromUrl and fetchImageFromUrl8.3 High
- Show moreLoading…