Weaknesses of type CWE-918

3,110 results

Falsificação de Solicitação no Servidor (SSRF)

O servidor web recupera conteúdo de uma URL fornecida pelo usuário sem validar adequadamente o destino. Isso permite que um atacante force o servidor a fazer requisições para hosts internos, serviços privados ou sistemas que não deveriam ser acessíveis, contornando controles de rede e autenticação.

Example

Uma aplicação oferece um proxy de imagens: recebe a URL 'http://exemplo.com/foto.jpg' e retorna o conteúdo. Um atacante envia 'http://localhost:8080/admin' ou 'http://192.168.1.100/dados-internos', forçando o servidor a acessar sistemas internos e exfiltrar dados sensíveis.

How to mitigate

Valide e faça whitelist de domínios/IPs permitidos antes de fazer a requisição; rejeite URLs locais, privadas (10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16) e metadados (169.254.169.254); use DNS pinning e resoluções contínuas. Em clouds, restrinja acesso ao serviço de metadados via iptables ou IMDSv2.

CVE-2026-21293MEDIUMAdobe Commerce | Server-Side Request Forgery (SSRF) (CWE-918)EPSS 0.2%CVE-2024-13940MEDIUMNinja Forms Webhooks <= 3.0.7 - Authenticated (Admin+) Server-Side Request Forgery via Form WebhookEPSS 0.2%CVE-2026-21294MEDIUMAdobe Commerce | Server-Side Request Forgery (SSRF) (CWE-918)EPSS 0.2%CVE-2026-101064HIGHObot before v0.23.0 Server-Side Request Forgery via MCPEPSS 0.2%CVE-2024-35635MEDIUMWordPress Ninja Tables plugin <= 5.0.9 - Server Side Request Forgery (SSRF) vulnerabilityEPSS 0.2%CVE-2026-72784MEDIUMCraft CMS 5.0.0-RC1 before 5.10.6 SSRF via GraphQL asset mutationEPSS 0.2%CVE-2024-35637MEDIUMWordPress Church Admin plugin <= 4.3.6 - Server Side Request Forgery (SSRF) vulnerabilityEPSS 0.2%CVE-2026-55524HIGHPraisonAI: SSRF in web_crawl tool via redirect-following and DNS rebinding (validate-then-fetch gap)EPSS 0.2%CVE-2026-20041MEDIUMCisco Nexus Dashboard Server Side Request Forgery VulnerabilityEPSS 0.2%CVE-2025-64427HIGHZimaOS is vulnerable to Server-Side Request Forgery (SSRF)EPSS 0.2%CVE-2026-65593MEDIUMn8n before 1.123.64, 2.29.8, and 2.30.1 SSRF via Dynamic Node ParametersEPSS 0.2%CVE-2024-39739MEDIUMIBM Datacap Navigator server-side request forgeryEPSS 0.2%CVE-2023-22817MEDIUMServer-side Request Forgery vulnerability in Western Digital My Cloud, My Cloud Home and SanDisk ibi productsEPSS 0.2%CVE-2023-46945CRITICALQD 20230821 is vulnerable to Server-side request forgery (SSRF) via a crafted requestEPSS 0.2%CVE-2025-59146HIGHNew API has Authenticated Server-Side Request Forgery (SSRF) issueEPSS 0.2%CVE-2025-13999HIGHHTML5 Audio Player – The Ultimate No-Code Podcast, MP3 & Audio Player 2.4.0 - 2.5.1 - Unauthenticated Server-Side Request ForgeryEPSS 0.2%CVE-2026-16947CRITICALTotal Processing Card Payments for WooCommerce <= 7.3 - Unauthenticated SSRF leading to Payment Bypass and Gateway Credential DisclosureEPSS 0.2%CVE-2024-13360MEDIUMAI Power: Complete AI Pack <= 1.8.96 - Authenticated (Subscriber+) Server-Side Request ForgeryEPSS 0.2%CVE-2024-51785MEDIUMWordPress Responsive Filterable Portfolio plugin <= 1.0.22 - Server Side Request Forgery (SSRF) vulnerabilityEPSS 0.2%CVE-2025-22726MEDIUMWordPress nK Themes Helper plugin <= 1.7.9 - Server Side Request Forgery (SSRF) vulnerabilityEPSS 0.2%