CWE-918: Server-Side Request Forgery
The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.
Also known as XSPA, SSRF.
A kind of CWE-441 Unintended Proxy or Intermediary.
From the CWE List. © The MITRE Corporation.
Newest
- friendicaFriendica Friendica - Server-Side Request Forgery6.5 Medium
- humansignal label studioHumanSignal Label Studio - Server-Side Request Forgery6.5 Medium
- dubDub Dub - Server-Side Request Forgery7.5 High
- commvault, commvault cloud +1 moreServer-Side Request Forgery (SSRF)8.8 High
- misp cti-transmutecti-transmute Unauthenticated SSRF via Hostnames Resolving to Internal IP Addresses8.7 High
- grafana mcp-grafana, mcp server +1 moreCVE-2026-19516 CVE Record9.1 Critical
- No product listedAn issue in usememos through v0.30.0 allows a remote authenticated attacker to perform Server...8.5 High
- mastodonMastodon: SSRF Protection Bypass via IPv4-compatible IPv6 Addresses6.3 Medium
- vulnerability-lookupWebhook SSRF guard bypassed by IPv6 transition addresses (NAT64/6to4/Teredo pass is_global check) in vulnerability-lookup6.9 Medium
- gabehf koitoKoito - Authenticated Server-Side Request Forgery via Album Image URL Parameter7.7 High
- duhow xiaoai-patchduhow xiaoai-patch - Server-Side Request Forgery in /auth Endpoint8.6 High
- automatischautomatisch - Server-Side Request Forgery via HTTP Request Custom Action7.7 High
- plugins360 all-in-one video galleryAll-in-One Video Gallery < 4.9.2 - Subscriber+ Server-Side Request Forgery via 'vdl' Parameter5.0 Medium
- unknown podcast playerPodcast Player < 8.3.1 - Unauthenticated Server-Side Request Forgery5.3 Medium
- thimpress learnpressLearnPress < 4.4.4 - Instructor+ Server-Side Request Forgery via openai_apply_image_feature2.2 Low
- dmitriiweb article-scraper-mcpdmitriiweb article-scraper-mcp server.py fetch_article server-side request forgery5.3 Medium
- adafap api-mcpadafap api-mcp Proxy API Endpoint route.ts customAxios server-side request forgery6.9 Medium
- nltk, nltk nltk/nltk +1 moreServer-Side Request Forgery (SSRF) in nltk/nltk3.7 Low
- phialsbasement koboldcpp-mcp-serverPhialsBasement KoboldCPP-MCP-Server BaseConfigSchema index.ts makeRequest server-side request forgery4.8 Medium
- ks-gen-ai jira-mcp-serverKS-GEN-AI jira-mcp-server add_attachment_from_public_url index.ts axios.get server-side request forgery4.8 Medium
- noctedefensor ludusmcpNocteDefensor LudusMCP read_range_config rangeConfig.ts server-side request forgery5.3 Medium
- mifi lossless-cutmifi lossless-cut Built-in HTTP API Service httpServer.ts server-side request forgery2.3 Low
- anubissbe projecthub-mcpanubissbe ProjectHub-Mcp Webhooks API complete_backend.js server-side request forgery5.3 Medium
- aliyun alibabacloud-dataworks-mcp-serveraliyun alibabacloud-dataworks-mcp-server initResources.ts ReadResourceRequestSchema server-side request forgery5.3 Medium
- adenot mcp-google-searchadenot mcp-google-search read_webpage index.ts server-side request forgery4.8 Medium
- flowiseai flowiseFlowise 3.1.4 SSRF via fetch-links Endpoint Incomplete Deny-List6.3 Medium
- hkuds nanobotHKUDS nanobot Provider-returned Image URL image_generation.py _download_image_data_url server-side request forgery5.3 Medium
- aehrc pathlingPathling: $import-pnp operation enables authenticated SSRF, credential leakage, and warehouse data poisoning8.6 High
- aehrc pathlingPathling $bulk-submit allows bearer-token exfiltration and persistent warehouse poisoning via unvalidated manifest output URLs8.7 High
- aehrc pathlingPathling: Explicit oauthMetadataUrl in bulk-submit allows OAuth client credential exfiltration8.7 High
- aehrc pathlingPathling has path traversal in $import-pnp manifest that enables read-capable SSRF via /jobs/{jobId}/{filename}8.7 High
- sonatype nexus repository 3, nexus repository manager +1 moreNexus Repository 3 - Server-Side Request Forgery via Email Configuration Verification5.1 Medium
- vestel telefunken te24553b45v2dz smart tvImproper URL Scheme and Destination Validation in SmartCenter browserseturl Command7.1 High
- opendap inc. hyrax-dockerOPeNDAP Hyrax SSRF and Credential Disclosure via Unvalidated Redirects6.5 Medium
- tobit laboratories ag teamdavidTeamDavid: Server-Side Request Forgery (SSRF) via 'pathname' parameter in link storing functionality6.3 Medium
- tobit laboratories ag teamdavidTeamDavid: Server-Side Request Forgery (SSRF) via 'pathname' parameter in move archive functionality6.3 Medium
- tobit laboratories ag teamdavidTeamDavid: Server-Side Request Forgery (SSRF) via 'pathname' parameter in sending functionality6.3 Medium
- tobit laboratories ag teamdavidTeamDavid: Server-Side Request Forgery (SSRF) via 'pathnameroot' parameter in search functionality7.7 High
- revenue administration e-signatureUnauthenticated WebSocket-to-XAdES SSRF in Revenue Administration's E-Signature5.4 Medium
- microsoft sharepoint onlineMicrosoft Office SharePoint Spoofing Vulnerability9.6 Critical
- @fedify fedifyFedify: Server-Side Request Forgery in getNodeInfo() Allows Access to Internal Network Resources8.8 High
- wgdashboardWGDashboard Server-Side Request Forgery Vulnerability9.8 Critical
- efstratios goudelis ground stationGround Station prior to 0.6.0 Unauthenticated Database Wipe and Arbitrary Data Injection via Socket.IO database_backup full_restore Action8.8 High
- efstratios goudelis ground stationGround Station prior to 0.6.0 Unauthenticated Persistent Blind Server-Side Request Forgery via Orbital Data Source URL9.2 Critical
- efstratios goudelis ground stationGround Station prior to 0.6.0 Unauthenticated DoS via service_control Socket.IO8.7 High
- escriptoriumServer-Side Request Forgery (SSRF) in eScriptorium8.5 High
- eclipse glassfishIn Eclipse GlassFish versions 8.0.x before 8.0.4, CSRF + SSRF in DownloadServlet ContentSources...9.6 Critical
- missionsquad mcp-apiMissionSquad mcp-api dcrClients.ts server-side request forgery5.3 Medium
- foxit software inc. pdf services apiBlind SSRF on Foxit PDF Services API8.5 High
- tribulant software newslettersNewsletters < 4.16 - Unauthenticated Server-Side Request Forgery via SNS Bounce Handler8.2 High
- Show moreLoading…