CWE-918: Server-Side Request Forgery
The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.
Also known as XSPA, SSRF.
A kind of CWE-441 Unintended Proxy or Intermediary.
From the CWE List. © The MITRE Corporation.
Newest
- lhccong fish-island-backendfish-island-backend through commit 7c61b78 SSRF via /api/web/parse6.9 Medium
- chaskiqChaskiq through 2.0.3 SSRF via createUrlUpload GraphQL Mutation9.2 Critical
- chaskiqChaskiq through 2.0.3 Unauthenticated SSRF via /oembed Endpoint6.9 Medium
- codewithcj sparkyfitnessSparkyFitness: SSRF via unvalidated custom_url in AI service settings5.4 Medium
- devolutions serverServer-side request forgery in PingOne groups endpoint in Devolutions Server 2026.3.8.0 and...2.6 Low
- wegow technologies wegowServer-Side Request Forgery in Wegow PDF export7.1 High
- bitcoinjbitcoinj Payment Request PaymentSession.java url.openConnection server-side request forgery6.9 Medium
- samugit83 redamonRedAmon through 7.0.1 Unauthenticated SSRF via /tradecraft/verify Endpoint6.9 Medium
- taskingaiTaskingAI through 0.3.0 SSRF via OpenAPI servers[0].url in Actions5.3 Medium
- valuecell-ai valuecellValueCell through 0.1.20 Unauthenticated SSRF via /api/v1/models/check6.9 Medium
- dakheera47 jobopsJobOps through 0.13.1 SSRF via POST /api/manual-jobs/fetch7.1 High
- aliasvault, aliasvault ghcr.io/aliasvault/aliasvault, ghcr.io/aliasvault/api +1 more +3 moreAliasVault: Server-Side Request Forgery via DNS rebinding in Favicon Extraction6.3 Medium
- heliumedu platformHelium: SSRF via External Calendar URL Allows Authenticated Users to Probe Internal Network4.3 Medium
- aws amazon neptune engineDeserialization of untrusted data in the Gremlin graph-import path in Amazon Neptune9.4 Critical
- lycheeorg lycheeLychee: Distinct post-fix SSRF variant in Photo::fromUrl due to missing IP pinning after DNS-based validation2.3 Low
- qnap systems inc. download stationSSRF in QNAP Download Station5.3 Medium
- kiboit phastpressPhastPress <= 3.10 - Unauthenticated Server-Side Request Forgery via 'src' Parameter7.3 High
matomoDebianAn issue in Matomo v.5.11.2 allows a remote attacker to obtain sensitive information via the...5.0 Medium- renovatebot renovate, mend mend-renovate-ce helm chart, mend-renovate-enterprise-edition helm chart +3 more +5 moreRenovate before 44.79.0 SSRF via HTTP Preset URLs and customDatasources8.4 High
- palo alto networks checkov by prisma cloudCheckov by Prisma Cloud: Server-Side Request Forgery Vulnerability1.1 Low
- invoiceshelfInvoiceShelf: SSRF via unvalidated Gotenberg PDF renderer host in PDF configuration6.8 Medium
- alam00000 bentopdfBentoPDF: SSRF via DNS Rebinding (TOCTOU) in Cloudflare CORS Proxy Worker6.8 Medium
- getredash redashRedash: JSON data source query URL can bypass base URL restriction4.9 Medium
- kedacore kedaKEDA: Privilege escalation from namespace admin to cluster admin via KEDA TriggerAuthentication9.9 Critical
- netscaler gatewayPortkey AI Gateway 1.14.0 through 1.15.2 SSRF via x-portkey-custom-host Header6.9 Medium
- turbodocx html-to-docxTurboDocx html-to-docx through 1.23.1 SSRF via img src Remote Image Download8.2 High
- giteaGitea blind SSRF through OpenID assertion verification5.3 Medium
- giteaGitea OpenID discovery server-side request forgery5.3 Medium
- yunaiv ruoyi-vue-proruoyi-vue-pro through 2026.09 SSRF via Midjourney referImageUrl and notify imageUrl5.3 Medium
- onlyoffice documentserverONLYOFFICE DocumentServer before 10.0.0 SSRF via downloadfile isInJwtToken Bypass6.3 Medium
- fv flowplayer video player flowplayer video player, unknown fv flowplayer video player +1 moreFV Player 7.5.44.7212 - 7.5.54.7212 - Contributor+ SSRF via retrieve_video_data4.1 Medium
- adobe c2pa, c2pa tool, c2pa-web +3 more +5 moreCAI Content Credentials | Server-Side Request Forgery (SSRF) (CWE-918)8.6 High
- adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)8.6 High
- adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)7.7 High
- adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)10.0 Critical
- adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)8.6 High
- adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)7.1 High
- adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)7.6 High
- finsys dockhandDockhand before 1.0.43 SSRF via /api/templates/compose Endpoint8.4 High
- finsys dockhandDockhand before 1.0.45 SSRF via IPv6 Transition Address Bypass in ipCategory5.3 Medium
- microsoft sharepoint server subscription edition, sharepoint server +1 moreMicrosoft Office SharePoint Elevation of Privilege Vulnerability7.5 High
- microsoft sharepoint server subscription edition, sharepoint server +1 moreMicrosoft Office SharePoint Elevation of Privilege Vulnerability7.5 High
- microsoft arc enabled servers - azure connected machine agentAzure Arc Elevation of Privilege Vulnerability6.5 Medium
- microsoft sharepoint server subscription edition, sharepoint server +1 moreMicrosoft Office SharePoint Information Disclosure Vulnerability6.5 Medium
- microsoft sharepoint server subscription edition, sharepoint server +1 moreMicrosoft Office SharePoint Elevation of Privilege Vulnerability7.5 High
- microsoft sharepoint server subscription edition, sharepoint server +1 moreMicrosoft Office SharePoint Spoofing Vulnerability5.7 Medium
- duke-git lancetLancet through 2.3.9 SSRF Protection Bypass via netutil.IsInternalIP6.3 Medium
- shaarliShaarli through 0.16.9 SSRF via Thumbnail Retrieval update-thumbnail Route5.1 Medium
- kareadita kavitaKavita 0.9.0 through 0.9.1.4 SSRF Blocklist Bypass via upload-cbl-file Endpoint2.3 Low
- razorpay ifscRazorpay IFSC Ruby gem through 2.0.62 SSRF via IFSC lookup6.9 Medium
- Show moreLoading…