CWE-918: Server-Side Request Forgery
The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.
Also known as XSPA, SSRF.
A kind of CWE-441 Unintended Proxy or Intermediary.
From the CWE List. © The MITRE Corporation.
Newest
- splunk, splunk enterprise, secure gateway +2 moreServer-Side Request Forgery (SSRF) through the Report Notification REST API in Splunk Secure Gateway8.8 High
- splunk, splunk enterprise, secure gateway +2 moreServer-Side Request Forgery (SSRF) through the Report Notifications REST API in Splunk Secure Gateway5.4 Medium
- termix-ssh termixTermix: Server-Side Request Forgery via Proxy Connectivity Test7.7 High
- ihor-sokoliuk mcp-searxngmcp-searxng hardened-mode SSRF bypasses permit internal URL access6.3 Medium
- ihor-sokoliuk mcp-searxngmcp-searxng: SSRF in web_url_read: the internal-address guard is disabled by default (MCP_HTTP_HARDEN off)6.5 Medium
geolensPyPIGeoLens's authorization and cache-scope flaws disclose private dataset data and metadata to unauthorized users (fixed in 1.2.4)No score- wekanWekan: SSRF filter bypass via DNS-resolving hostname in outgoing webhooks (incomplete fix of CVE-2026-53446)8.5 High
- @contentful mcp-server, mcp-tools, contentful contentful-mcp-server +2 moreContentful MCP Server: export_space/import_space tools pass LLM-controlled `host`/`proxy` args to CMA client, redirecting server PAT to attacker-controlled endpoint7.7 High
- orval-labs orvalOrval: Generation-time SSRF + remote/local file inclusion via unrestricted $ref7.1 High
- red hat multicluster engine for kubernetes 2.10, multicluster engine for kubernetes 2.11, multicluster engine for kubernetes 2.17 +3 more +5 moreCluster-proxy-addon: cluster-proxy-addon: unauthenticated ssrf to arbitrary managed-cluster services via public route9.3 Critical
- ridafkih keeper.shkeeper.sh Calendar version prior to 2.18.14 SSRF Guard Bypass via DNS Rebinding2.3 Low
- cisco packaged contact center enterprise, unified contact center enterprise +1 moreCisco Packaged Contact Center Enterprise & Cisco Unified Contact Center Enterprise Server-Side Request Forgery Vulnerability5.0 Medium
- dell openmanage enterpriseDell OpenManage Enterprise, versions prior to 4.7.0, contains a Server-Side Request Forgery (SSRF...7.2 High
- eidetic-labs stigmem-nodeStigmem before 0.9.0a11 SSRF via unvalidated webhook delivery_address5.3 Medium
- arcadedata arcadedbArcadeDB before 26.8.1 Server-Side Request Forgery via LOAD CSV8.3 High
- ail-project ail-frameworkAuthenticated Server-Side Request Forgery in AIL Framework Crawler Allows Access to Internal Network Resources7.1 High
- unknown animation addons for elementorAnimation Addons for Elementor < 2.7.2 - Unauthenticated Server-Side Request Forgery7.2 High
- librenmsLibreNMS before 26.7.0 Stored XSS via Oxidized API9.2 Critical
- frangoteam fuxaFUXA: SSRF hardening for `device-webapi-request`6.0 Medium
- netflix lemurLemur: Server-Side Request Forgery via the ACME client following server-controlled URLs7.4 High
- netflix lemurLemur: Incomplete fix for CVE-2026-55166 -- ACME authority update endpoint allows non-admin to replace `acme_url` with internal IP, bypassing allowlist7.7 High
- netflix lemurLemur: SSRF protection in certificate revocation checking bypassable via HTTP redirects and DNS rebinding (incomplete fix for CVE-2026-55162)6.3 Medium
- mobsf mobile-security-framework-mobsfMobSF: SSRF port restriction bypass in assetlinks_check3.0 Low
- magicmirrororg magicmirrorMagicMirror newsfeed Socket.IO notification allows blind server-side request forgery6.3 Medium
- magicmirrororg magicmirrorMagicMirror: ssrf calendar .js6.3 Medium
- red hat ansible automation platform 2.5 for rhel 8, ansible automation platform 2.5 for rhel 9, ansible automation platform 2.6 +2 more +4 moreAwx: webhook status callback ssrf leaks the git pat7.7 High
- red hat ansible automation platform 2.4 for rhel 8, ansible automation platform 2.4 for rhel 9, ansible automation platform 2.5 for rhel 8 +4 more +6 moreAutomation-controller: automation-controller: kubernetes service account token exfiltration via hashicorp vault credential ssrf9.6 Critical
- mybbMyBB: IPv6 SSRF4.3 Medium
- hmbown codewhaleCodeWhale before 0.8.64 SSRF Bypass via DNS Pinning TOCTOU9.2 Critical
- infiniflow ragflowRAGFlow < 0.26.3 - Server-Side Request Forgery via Agent Invoke Component8.4 High
- brainstorm force ottokitWordPress OttoKit plugin <= 1.1.35 - Server Side Request Forgery (SSRF) vulnerability7.2 High
- deknows pdf smart viewer for elementorWordPress PDF Smart Viewer for Elementor plugin <= 1.0.4 - Server Side Request Forgery (SSRF) vulnerability7.2 High
- apoyl [aotuman] grab wechat articlesWordPress [Aotuman] Grab WeChat Articles plugin <= 2.0.1 - Server Side Request Forgery (SSRF) vulnerability6.0 Medium
- arcadedata arcadedbArcadeDB before 26.8.1 SSRF via IMPORT DATABASE validator bypass7.1 High
- siyuan-note siyuanSiYuan before v3.7.4 SSRF via IPv6 Transition Address Bypass6.9 Medium
- apache skywalking mcpApache SkyWalking MCP: SSRF via set_skywalking_url Tool and GraphQL Expression Injection in MCP Server9.8 Critical
- lfprojects mlflowMLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding)9.3 Critical
- decolua 9router9Router: Authenticated Server-Side Request Forgery (SSRF) via OIDC Provider Test Endpoint8.6 High
- vllmvLLM: SSRF + arbitrary local file read in MiMoV2OmniMultiModalProcessor `_fetch_image` and audio loader bypass MediaConnector protections6.5 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.2.1 sSRF was possible via the OpenAPI preview proxy in...6.3 Medium
- jetbrains intellij ideaIn JetBrains IntelliJ IDEA before 2026.2.1 sSRF was possible via the DevKit debug listener endpoint5.4 Medium
- jae-jae fetcher-mcpjae-jae fetcher-mcp URL Validation security-credentials fetch_urls server-side request forgery5.3 Medium
- bulwarkmail webmailIn Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, insufficient Cascading Style Sheets ...5.8 Medium
- siyuan-note siyuanSiYuan 3.7.3 Cross-Site WebSocket Hijacking via network proxy7.1 High
- kira-pgr promptshopmcpKira-Pgr PromptShopMCP Image-Toolkit-MCP-Server server.py download_image server-side request forgery5.3 Medium
- unknown woomsWooMS <= 9.14 - Unauthenticated Server-Side Request Forgery and Sensitive Information Disclosure5.9 Medium
- jkawamoto mcp-florence2jkawamoto mcp-florence2 __init__.py get_images server-side request forgery5.3 Medium
- No product listedA blind SSRF attack in DataHub v.1.5.0.1 allows a remote attacker to execute arbitrary code via...9.8 Critical
- graphlit graphlit-mcp-servergraphlit graphlit-mcp-server ssrf-test Endpoint tools.ts fetch server-side request forgery5.3 Medium
- gomarble-ai facebook-ads-mcp-servergomarble-ai facebook-ads-mcp-server server.py fetch_pagination_url server-side request forgery5.3 Medium
- Show moreLoading…