Weaknesses of type CWE-918

3,099 results

Falsificação de Solicitação no Servidor (SSRF)

O servidor web recupera conteúdo de uma URL fornecida pelo usuário sem validar adequadamente o destino. Isso permite que um atacante force o servidor a fazer requisições para hosts internos, serviços privados ou sistemas que não deveriam ser acessíveis, contornando controles de rede e autenticação.

Example

Uma aplicação oferece um proxy de imagens: recebe a URL 'http://exemplo.com/foto.jpg' e retorna o conteúdo. Um atacante envia 'http://localhost:8080/admin' ou 'http://192.168.1.100/dados-internos', forçando o servidor a acessar sistemas internos e exfiltrar dados sensíveis.

How to mitigate

Valide e faça whitelist de domínios/IPs permitidos antes de fazer a requisição; rejeite URLs locais, privadas (10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16) e metadados (169.254.169.254); use DNS pinning e resoluções contínuas. Em clouds, restrinja acesso ao serviço de metadados via iptables ou IMDSv2.

CVE-2025-2170HIGHA Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface, which in specific condEPSS 0.3%CVE-2026-5623MEDIUMhcengineering Huly Platform Import Endpoint index.ts server-side request forgeryEPSS 0.3%CVE-2026-17617HIGHServer-Side Request Forgery (SSRF) in IBM Application Gateway OperatorEPSS 0.3%CVE-2026-6215MEDIUMDbGate REST/GraphQL openApiDriver.ts apiServerUrl1 server-side request forgeryEPSS 0.3%CVE-2026-35629MEDIUMOpenClaw < 2026.3.25 - Server-Side Request Forgery via Unguarded Configured Base URLs in Channel ExtensionsEPSS 0.3%CVE-2025-53371CRITICALDiscordNotifications allows DOS, SSRF, and possible RCE through requests to user-controlled URLsEPSS 0.3%CVE-2026-63096MEDIUMDendrite 0.13.8 SSRF via Unauthenticated Legacy Media Download EndpointEPSS 0.3%CVE-2026-75871HIGHServer-Side Request Forgery (SSRF) in GitLab AI GatewayEPSS 0.3%CVE-2024-1568MEDIUMSeraphinite Accelerator <= 2.20.52 - Authenticated (Subscriber+) Server-Side Request Forgery in OnAdminApi_HtmlCheckEPSS 0.3%CVE-2025-61768MEDIUMKuno CMS Vulnerable to Server-Side Request Forgery (SSRF) via Unsafe SVG UploadEPSS 0.3%CVE-2023-39301MEDIUMQTS, QuTS hero, QuTScloudEPSS 0.3%CVE-2025-14443MEDIUMOse-openshift-apiserver: openshift api server: server-side request forgery (ssrf) vulnerability in imagestreamimport mechanismEPSS 0.3%CVE-2026-67101CRITICALHCL BigFix Service Management is affected by multiple security vulnerabilities.EPSS 0.3%CVE-2025-52455MEDIUMServer-Side Request Forgery (SSRF) vulnerability in Salesforce Tableau Server on Windows, Linux (EPS Server modules) allows Resource LocatioEPSS 0.3%CVE-2026-44971HIGHGuardDog: Blind GitHub URL rewrite in remote project scanning causes SSRF and `GH_TOKEN` exfiltrationEPSS 0.3%CVE-2026-77267HIGHmcp-atlassian has an incomplete SSRF remediationEPSS 0.3%CVE-2026-62226MEDIUMOpenClaw 2026.3.28 < 2026.5.19 Authorization Bypass via Browser Act RouteEPSS 0.3%CVE-2026-63311MEDIUMNLTK before 3.10.0 SSRF via DNS Resolution FailureEPSS 0.3%CVE-2025-13809MEDIUMorionsec orion-ops SSH Connection MachineInfoController.java server-side request forgeryEPSS 0.3%CVE-2026-35548HIGHAn issue was discovered in guardsix (formerly Logpoint) ODBC Enrichment Plugins before 5.2.1 (5.2.1 is used in guardsix 7.9.0.0). A logic flEPSS 0.3%