CWE-918: Server-Side Request Forgery
The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.
Also known as XSPA, SSRF.
A kind of CWE-441 Unintended Proxy or Intermediary.
From the CWE List. © The MITRE Corporation.
Newest
- hyperdxio hyperdxHyperDX < 2.31.0 SSRF via Webhook Test Endpoint5.3 Medium
- limesurveyLimeSurvey SSRF via REST API Survey Template Host Header6.3 Medium
- themexpert.com jmedia extension for joomlaJoomla Extension - themexpert.com - SSRF via remote download in JMedia Extension < 1.6.05.1 Medium
- apache syncopeApache Syncope: Low-privileged authenticated SSRF in Connectors and Resources check8.1 High
- surrealdbSurrealDB before 3.2.0 SSRF via JWKS URL hostname resolution5.1 Medium
- No product listedFlareSolverr before version 3.4.7 contains a server-side request forgery (SSRF) vulnerability in...7.5 High
- 1panel-dev cordyscrm1Panel-dev CordysCRM Third Party Edit Endpoint IntegrationConfigService.java getSqlBotSrc server-side request forgery5.3 Medium
- 1panel-dev cordyscrm1Panel-dev CordysCRM Third Party Endpoint TokenService.java server-side request forgery5.3 Medium
- sipeed picoclawSipeed PicoClaw web_fetch web.go isPrivateOrRestrictedIP server-side request forgery5.3 Medium
- zhayujie cowagentzhayujie CowAgent web_fetch.py WebFetch.execute server-side request forgery5.3 Medium
- zevorn rt-clawzevorn rt-claw http_request swarm.c receiver_thread server-side request forgery6.9 Medium
- zevorn rt-clawzevorn rt-claw http_request tool_net.c claw_net_post server-side request forgery6.9 Medium
- zevorn rt-clawzevorn rt-claw http_request net.c claw_net_post server-side request forgery6.9 Medium
- nextlevelbuilder goclawnextlevelbuilder GoClaw web_fetch web_shared.go isPrivateIP server-side request forgery5.3 Medium
- sipeed picoclawSipeed PicoClaw web.go web_fetch server-side request forgery6.9 Medium
- dfpc-coe cloudtakCloudTAK: Authenticated full-read SSRF in /api/esri* routes — user-controlled URL fetched with no IP-classification guard7.6 High
- astrbotdevs astrbotAstrBotDevs AstrBot Plugin Update plugin.py update_all_plugins server-side request forgery5.3 Medium
- ibm langflow oss, langflow +1 moreSSRF Protection Configuration Vulnerability7.7 High
- dfpc-coe cloudtakCloudTAK: Authenticated full-read SSRF in CloudTAK basemap import (PUT /api/basemap) — no IP-classification guard5.0 Medium
- pipeboard-co meta-ads-mcpMeta Ads MCP: Server-Side Request Forgery (SSRF) in `upload_ad_image` via Unrestricted `image_url` Fetch8.3 High
- matrix-org dendriteDendrite 0.13.8 SSRF via Unauthenticated Legacy Media Download Endpoint6.9 Medium
- poco-ai poco-clawpoco-ai poco-claw task.py run_task server-side request forgery6.9 Medium
- getgrav grav, grav-plugin-api +1 moreGrav API Plugin: Webhook SSRF via Unrestricted cURL Protocols9.4 Critical
- getgrav gravGrav < 2.0.4 SSRF via Unrestricted cURL Protocols8.4 High
- openclawOpenClaw 2026.4.14 < 2026.5.26 SSRF via Browser Snapshot4.9 Medium
- openclawOpenClaw 2026.3.28 < 2026.5.19 Authorization Bypass via Browser Act Route5.1 Medium
- openclawOpenClaw 2026.4.20 < 2026.5.28 Policy Bypass via Media Upload2.3 Low
- openclawOpenClaw < 2026.6.6 Network Policy Bypass via exec-server4.9 Medium
- No product listedXenforo 2.3.8 is vulnerable to SSRF. Attackers that have administrator privileges or are able to...7.5 High
- arcadedata arcadedb, com.arcadedb arcadedb-engine +1 moreArcadeDB: IMPORT DATABASE allows SSRF and arbitrary local file read by authenticated users7.1 High
- bigbluebuttonBigBlueButton: Presentation URL Security Hardening6.8 Medium
- stoatchatstoatchat < 0.14.0 SSRF via DNS-based IP Blocklist Bypass7.7 High
- huggingface text-generation-inferencetext-generation-inference 3.3.7 SSRF via fetch_image in multimodal chat completions6.9 Medium
- microsoft kiotaKiota: Generation-time SSRF + remote/local file inclusion via unrestricted $ref7.1 High
- microsoft kiotaKiota: Workspace-config poisoning: out-of-repo file write + generation-time SSRF7.0 High
- stoatchatstoatchat before 0.13.5 Unauthenticated SSRF via proxy and embed endpoints9.2 Critical
- stacklok toolhiveToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation)4.7 Medium
- tensorzeroTensorZero: Arbitrary file read and SSRF in TensorZero Gateway's internal object storage endpoint7.7 High
- doyensec safeurlsafeurl: Missing IPv6 CIDR Ranges in Blocklist6.3 Medium
- stacklok toolhiveToolHive: SSRF guard misses IPv6 NAT64 ranges (64:ff9b::/96, 64:ff9b:1::/48), allowing metadata/internal access behind a NAT64 gateway2.9 Low
- wekanWekan: Server-Side Request Forgery (SSRF) via webhook integration URLs6.2 Medium
- decolua 9router9Router: Kiro region injection allows authenticated SSRF with Authorization header forwarding6.4 Medium
- amazon strands-agents-toolsCredential disclosure in Strands Agents Tools elasticsearch_memory tool6.9 Medium
- koelKoel: Full-read SSRF via podcast enclosure URL: isPublicHost() filter_var guard does not reject NAT64 (64:ff9b::/96) or 6to4 (2002::/16) IPv6-transition wrappers of internal IPv45.3 Medium
- koelKoel: Incomplete fix for CVE-2026-47260 — systemic SSRF in podcast & radio fetch paths7.1 High
phanan/koelPackagistKoel has SSRF through Authenticated Subsonic podcast feed URLs6.4 Medium- koelKoel: Authenticated Full-Read SSRF via Subsonic Internet Radio Stations7.7 High
- koelKoel: Authenticated Blind SSRF via Subsonic Podcast Channel Creation4.3 Medium
- penpotPenpot: Authenticated SSRF in remote image import via create-file-media-object-from-url7.7 High
- dani-garcia vaultwardenVaultwarden: Server-side request forgery (SSRF) via Icon Endpoint Decimal/Hex/Octal IP Bypass5.8 Medium
- Show moreLoading…