Weaknesses of type CWE-918

3,123 results

Falsificação de Solicitação no Servidor (SSRF)

O servidor web recupera conteúdo de uma URL fornecida pelo usuário sem validar adequadamente o destino. Isso permite que um atacante force o servidor a fazer requisições para hosts internos, serviços privados ou sistemas que não deveriam ser acessíveis, contornando controles de rede e autenticação.

Example

Uma aplicação oferece um proxy de imagens: recebe a URL 'http://exemplo.com/foto.jpg' e retorna o conteúdo. Um atacante envia 'http://localhost:8080/admin' ou 'http://192.168.1.100/dados-internos', forçando o servidor a acessar sistemas internos e exfiltrar dados sensíveis.

How to mitigate

Valide e faça whitelist de domínios/IPs permitidos antes de fazer a requisição; rejeite URLs locais, privadas (10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16) e metadados (169.254.169.254); use DNS pinning e resoluções contínuas. Em clouds, restrinja acesso ao serviço de metadados via iptables ou IMDSv2.

CVE-2026-16481MEDIUMServer-Side Request Forgery (SSRF) and Credential Exfiltration in googleapis/mcp-toolbox cloud-healthcare-fhir-fetch-page ToolEPSS 0.2%CVE-2025-52713MEDIUMWordPress Post and Page Builder by BoldGrid – Visual Drag and Drop Editor plugin <= 1.27.8 - Server Side Request Forgery (SSRF) VulnerabilityEPSS 0.2%CVE-2024-0862MEDIUMThe Proofpoint Encryption endpoint of Proofpoint Enterprise Protection contains a Server-Side Request Forgery vulnerability that allows an aEPSS 0.2%CVE-2026-54565MEDIUMrhwp browser extension performs SSRF / private-network requests and leaks HWP preview data to untrusted pagesEPSS 0.2%CVE-2026-25310MEDIUMWordPress Extend Link plugin <= 2.0.0 - Server Side Request Forgery (SSRF) vulnerabilityEPSS 0.2%CVE-2025-36037MEDIUMIBM webMethods Integration server-side request forgeryEPSS 0.2%CVE-2025-47700LOWAI plugin APIs can be triggered using post actionsEPSS 0.2%CVE-2025-10874MEDIUMOrbit Fox < 3.0.2 - Author+ Server-Side Request ForgeryEPSS 0.2%CVE-2026-24242HIGHNVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause server-side request forgery. A successful exploit ofEPSS 0.2%CVE-2026-1249MEDIUMMP3 Audio Player – Music Player, Podcast Player & Radio by Sonaar 5.3 - 5.10 - Authenticated (Author+) Server-Side Request ForgeryEPSS 0.2%CVE-2025-12886HIGHOxygen <= 6.0.8 - Unauthenticated Server-Side Request Forgery via route_pathEPSS 0.2%CVE-2026-54689MEDIUMmcp-searxng hardened-mode SSRF bypasses permit internal URL accessEPSS 0.2%CVE-2026-77164MEDIUMCircles' remote-instance signature verification fetches the attacker-supplied keyId URL before trust in the remote instance is established, EPSS 0.2%CVE-2026-24548MEDIUMWordPress Radio Player plugin <= 2.0.91 - Server Side Request Forgery (SSRF) vulnerabilityEPSS 0.2%CVE-2025-48364MEDIUMWordPress rajce plugin <= 0.4.2 - Server Side Request Forgery (SSRF) vulnerabilityEPSS 0.2%CVE-2026-65466MEDIUMWordPress JetBooking plugin <= 4.1.2 - Server Side Request Forgery (SSRF) vulnerabilityEPSS 0.2%CVE-2025-22672MEDIUMWordPress Video & Photo Gallery for Ultimate Member plugin <= 1.1.2 - Server Side Request Forgery (SSRF) vulnerabilityEPSS 0.2%CVE-2026-54605HIGHOAuth: Cross-origin token-request redirects can expose signed request metadataEPSS 0.2%CVE-2026-66437MEDIUMWordPress Feedzy plugin <= 5.2.4 - Server Side Request Forgery (SSRF) vulnerabilityEPSS 0.2%CVE-2026-57627MEDIUMWordPress Kirki plugin <= 6.0.11 - Server Side Request Forgery (SSRF) vulnerabilityEPSS 0.2%