Weaknesses of type CWE-918

3,106 results

Falsificação de Solicitação no Servidor (SSRF)

O servidor web recupera conteúdo de uma URL fornecida pelo usuário sem validar adequadamente o destino. Isso permite que um atacante force o servidor a fazer requisições para hosts internos, serviços privados ou sistemas que não deveriam ser acessíveis, contornando controles de rede e autenticação.

Example

Uma aplicação oferece um proxy de imagens: recebe a URL 'http://exemplo.com/foto.jpg' e retorna o conteúdo. Um atacante envia 'http://localhost:8080/admin' ou 'http://192.168.1.100/dados-internos', forçando o servidor a acessar sistemas internos e exfiltrar dados sensíveis.

How to mitigate

Valide e faça whitelist de domínios/IPs permitidos antes de fazer a requisição; rejeite URLs locais, privadas (10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16) e metadados (169.254.169.254); use DNS pinning e resoluções contínuas. Em clouds, restrinja acesso ao serviço de metadados via iptables ou IMDSv2.

CVE-2026-27600MEDIUMHomeBox affected by Blind SSRFEPSS 0.3%CVE-2026-2252HIGHXML External Entity (XXE) vulnerability resulting in Server-Side Request Forgery (SSRF)EPSS 0.3%CVE-2026-50552MEDIUMKoel: Server-Side Request Forgery (SSRF) in radio station creation due to missing validation bailEPSS 0.3%CVE-2026-10239MEDIUMJeecgBoot edit WordUtil.addImage server-side request forgeryEPSS 0.3%CVE-2024-30531MEDIUMWordPress Nelio Content plugin <= 3.2.0 - Server Side Request Forgery (SSRF) vulnerabilityEPSS 0.3%CVE-2026-10241MEDIUMjeecgboot The server processes these URLs Cloud Instance Metadata Endpoint debug FileDownloadUtils.download2DiskFromNet server-side request forgeryEPSS 0.3%CVE-2026-44441MEDIUMERPNext: Possible SSRF by any authenticated userEPSS 0.3%CVE-2025-36324MEDIUMVulnerabilities found in Watson Data IntelligenceEPSS 0.3%CVE-2026-4989MEDIUMImproper input validation in the gateway health check feature in Devolutions Server allows a low-privileged authenticated user to perform seEPSS 0.3%CVE-2026-3530MEDIUMOpenID Connect / OAuth client - Moderately critical - Server-side request forgery, Information disclosure - SA-CONTRIB-2026-025EPSS 0.3%CVE-2026-34170MEDIUMCoolify: Server-Side Request Forgery via attacker-controlled GitHub App API URLEPSS 0.3%CVE-2026-41195MEDIUMmosparo: Rule package source URL stored SSRF enables internal HTTP probingEPSS 0.3%CVE-2026-3216MEDIUMDrupal Canvas - Moderately critical - Server-side request forgery, Information disclosure - SA-CONTRIB-2026-017EPSS 0.3%CVE-2026-19075MEDIUMAll-in-One Video Gallery < 4.9.2 - Subscriber+ Server-Side Request Forgery via 'vdl' ParameterEPSS 0.3%CVE-2026-71172MEDIUMDell Cloud Disaster Recovery, versions 20.2 and prior, contain a Server-Side Request Forgery (SSRF) vulnerability. A low privileged attackerEPSS 0.3%CVE-2026-10240MEDIUMJeecgBoot test server-side request forgeryEPSS 0.3%CVE-2026-71246MEDIUMPixelfed - Authenticated SSRF via Remote URL SearchEPSS 0.3%CVE-2026-19486HIGHSSRF in Gemini Enterprise Agent Platform App BuilderEPSS 0.3%CVE-2026-10276MEDIUMhekmon8 Jenkins-server-mcp get_build_status/get_build_log/trigger_build index.ts jobPath server-side request forgeryEPSS 0.3%CVE-2026-77067MEDIUMOmnivore Stored Server-Side Request Forgery via the setWebhook MutationEPSS 0.3%