CWE-918: Server-Side Request Forgery
The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.
Also known as XSPA, SSRF.
A kind of CWE-441 Unintended Proxy or Intermediary.
From the CWE List. © The MITRE Corporation.
Newest
- dell openmanage server administrator, openmanage server administrator managed node (patch) for windows, openmanage server administrator managed node for rhel 8.10 +3 more +5 moreDell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Server-Side Request...7.4 High
- dell openmanage server administrator, openmanage server administrator managed node (patch) for windows, openmanage server administrator managed node for rhel 8.10 +3 more +5 moreDell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Server-Side Request...6.4 Medium
- unitecms unlimited elements for elementor (free widgets, addons, templates), unlimited elements for elementor (free widgets, addons, templates) +1 moreWordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.19 - Server Side Request Forgery (SSRF) vulnerability6.4 Medium
- misp sachertortephpMISP sachertortephp Xml::build() Operator Precedence Bypass Allows Unintended HTTPS SSRF When readFile Is Disabled5.1 Medium
- hkuds nanobotHKUDS nanobot before 0.3.0 Server-Side Request Forgery via WebFetchTool9.2 Critical
- dgtlmoon changedetection.iochangedetection.io through 0.60.6 SSRF via browser-step Goto URL8.7 High
- metabaseMetabase through 0.63.18 SSRF via GeoJSON URL validation bypass6.9 Medium
- nangohq nangoNango through 0.70.4 Server-Side Request Forgery via Configuration7.1 High
- bytedance coze-studioCoze Studio through 0.5.1 Server-Side Request Forgery via Plugin7.1 High
- graylog2 graylog2-serverGraylog through 7.1.4 Server-Side Request Forgery via HTTP Redirect7.1 High
- requarks wiki.jsWiki.js through 2.5.314 Server-Side Request Forgery via Image Prefetch7.1 High
- No product listedchatwoot Shopify OAuth callbacks_controller.rb server-side request forgery5.3 Medium
- altium enterprise serverServer-Side Request Forgery in Altium Enterprise Server UnifiedLogin Service Allows Unauthenticated System Compromise10.0 Critical
- tanium threat responseTanium addressed a server-side request forgery vulnerability in Threat Response.6.5 Medium
- apache software foundation myfacesApache MyFaces: Server-Side Request Forgery / Local File Inclusion Vulnerability9.8 Critical
- berriai litellmLiteLLM: Server-side request forgery via the `user_config` request parameter in LiteLLM Proxy5.3 Medium
- quickwit-oss quickwitQuickwit through 0.9.0 SSRF via SQS queue_url Parameter8.7 High
- oras-project oras-gooras-go: Blind SSRF via unvalidated Link header URL in pagination allows internal network probing4.7 Medium
- tduckcloud tduck-survey-formTDuck survey form through 5.3 Server-Side Request Forgery via Unvalidated Webhook URL7.1 High
- opengoofy hippo4jHippo4j through 1.5.0 SSRF via clientAddress Parameter5.3 Medium
- mlrunMLRun through 1.11.0 Server-Side Request Forgery via Webhook5.3 Medium
- datageartech datagearDataGear through 6.0.0 Unauthenticated SSRF via HTTP Dataset Preview8.8 High
- No product listedWuzhiCMS Remote Image Fetch index.php saveRemote server-side request forgery6.9 Medium
- jenkins project bitbucket push and pull request pluginJenkins Bitbucket Push and Pull Request Plugin 4.0.1 and earlier trusts values provided in the...6.5 Medium
- unknown wp import export liteWP Import Export Lite < 3.9.33 - Admin+ SSRF via Import URL Handling4.1 Medium
- a2ui-project a2uia2ui-project a2ui FileResolver file_resolver.py httpx.get server-side request forgery6.9 Medium
- No product listedA Server-Side Request Forgery vulnerability exists in sat_proxy.php in Zenith Satellite Tracker 1...9.8 Critical
- ag-ui-protocol ag-uiag-ui-protocol ag-ui Multimodal Content utils.py urllib.request.urlopen server-side request forgery5.3 Medium
- zereight gitlab-mcp@zereight/mcp-gitlab Vulnerable to Server-Side Request Forgery9.6 Critical
- shaneisrael fireshareFireshare has unauthenticated SSRF via missing login_required on webhook test endpoints7.2 High
- concrete cms cms, concretecms concrete cms +1 moreConcrete CMS 9.0.0 to 9.5.2 is vulnerable to SSRF protection bypass in remote file import when multiple URLs share a host but use different ports2.1 Low
- opencti-platform openctiOpenCTI: Synchronizer SSRF: stream fetch has no URL validation7.7 High
- arubanetworks edgeconnect sd-wan orchestrator, hewlett packard enterprise (hpe) edgeconnect sd-wan gateways, hpe edgeconnect operating system +2 moreAuthenticated Server-Side Request Forgery Vulnerabilities Leading to Information Disclosure in EdgeConnect SD-WAN Orchestrator8.5 High
- fabric.jsFabric.js loadFromJSON Server-Side Request Forgery Vulnerability4.0 Medium
- doyensec safeurlSSRF protection bypass in safeurl via IPv6 addresses and unresolvable hosts9.0 Critical
- wwbn avideoAVideo through 29.0 Blind SSRF via getHeaderContentTypeFromURL5.3 Medium
- wwbn avideoAVideo through 29.0 Unauthenticated SSRF via Host Header6.9 Medium
- unclecode crawl4aiCrawl4AI before 0.9.3 SSRF via PDFContentScrapingStrategy8.3 High
- flowiseai flowiseFlowise before 3.1.4 Server-Side Request Forgery via document loaders7.6 High
- flowiseai flowiseFlowise before 3.1.4 SSRF and API Key Exfiltration via Chat Model Nodes8.7 High
- kubesphereKubeSphere through 4.1.3 SSRF via git credential verification endpoint8.3 High
- tencent weknoraWeKnora before 0.7.0 SSRF via Unvalidated HTTP Redirects7.1 High
- No product listedAn authenticated Server-Side Request Forgery (SSRF) in the /adminapi/file/online_upload component...8.1 High
- refly-ai reflyRefly through 1.1.0 Server-Side Request Forgery via scrape endpoint5.3 Medium
- ibm langflow oss, langflow +1 moreIncomplete Security Scanner Blocklist Enables Network-Based Code Execution9.6 Critical
- ibm langflow oss, langflow +1 moreLangflow OSS is affected by server-side request forgery due to missing URL validation in flow components6.5 Medium
- ibm langflow oss, langflow +1 moreLangflow is vulnerable to Server-Side Request Forgery due to missing or bypassable URL validation in multiple components5.4 Medium
- ibm langflow oss, langflow +1 moreLangflow is vulnerable to server-side request forgery due to missing egress validation on server-side URL fetches6.5 Medium
- netease-youdao lobsterainetease-youdao LobsterAI Browser Network Configuration openclawConfigSync.ts OpenClawConfigSync.buildBrowserConfig server-side request forgery5.3 Medium
- ibm websphere application serverIBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities5.4 Medium
- Show moreLoading…