Weaknesses of type CWE-918

3,049 results

Falsificação de Solicitação no Servidor (SSRF)

O servidor web recupera conteúdo de uma URL fornecida pelo usuário sem validar adequadamente o destino. Isso permite que um atacante force o servidor a fazer requisições para hosts internos, serviços privados ou sistemas que não deveriam ser acessíveis, contornando controles de rede e autenticação.

Example

Uma aplicação oferece um proxy de imagens: recebe a URL 'http://exemplo.com/foto.jpg' e retorna o conteúdo. Um atacante envia 'http://localhost:8080/admin' ou 'http://192.168.1.100/dados-internos', forçando o servidor a acessar sistemas internos e exfiltrar dados sensíveis.

How to mitigate

Valide e faça whitelist de domínios/IPs permitidos antes de fazer a requisição; rejeite URLs locais, privadas (10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16) e metadados (169.254.169.254); use DNS pinning e resoluções contínuas. Em clouds, restrinja acesso ao serviço de metadados via iptables ou IMDSv2.

CVE-2023-23943MEDIUMBlind SSRF via server URL input in the Nextcloud Mail appEPSS 0.9%CVE-2022-44729—Apache XML Graphics Batik: Information disclosure vulnerabilityEPSS 0.9%CVE-2026-34647HIGHAdobe Commerce | Server-Side Request Forgery (SSRF) (CWE-918)EPSS 0.9%CVE-2022-0132MEDIUMServer-Side Request Forgery (SSRF) in chocobozzz/peertubeEPSS 0.9%CVE-2022-24739HIGHServer-Side Request Forgery (SSRF) and URL Redirection to Untrusted Site ('Open Redirect') in alltubeEPSS 0.9%CVE-2022-36802MEDIUMThe ManageJiraConnectors API in Atlassian Jira Align before version 10.109.2 allows remote attackers to exploit this issue to access internaEPSS 0.9%CVE-2026-55051MEDIUMMicrosoft SharePoint Server Information Disclosure VulnerabilityEPSS 0.9%CVE-2026-58639MEDIUMMicrosoft SharePoint Server Spoofing VulnerabilityEPSS 0.9%CVE-2025-55139MEDIUMSSRF in Ivanti Connect Secure before 22.7R2.9 or 22.8R2, Ivanti Policy Secure before 22.7R1.6, Ivanti ZTA Gateway before 2.8R2.3-723 and IvaEPSS 0.9%CVE-2022-23644HIGHServer-side request forgery in BookWyrmEPSS 0.9%CVE-2026-57106CRITICALData Quality Elevation of Privilege VulnerabilityEPSS 0.9%CVE-2026-33107CRITICALAzure Databricks Elevation of Privilege VulnerabilityEPSS 0.9%CVE-2026-65801CRITICALMicrosoft Exchange Online Elevation of Privilege VulnerabilityEPSS 0.9%CVE-2026-32169CRITICALAzure Cloud Shell Elevation of Privilege VulnerabilityEPSS 0.9%CVE-2026-32186CRITICALMicrosoft Bing Elevation of Privilege VulnerabilityEPSS 0.9%CVE-2026-35431CRITICALMicrosoft Entra ID Entitlement Management Spoofing VulnerabilityEPSS 0.9%CVE-2023-25262HIGHStimulsoft GmbH Stimulsoft Designer (Web) 2023.1.3 is vulnerable to Server Side Request Forgery (SSRF). TThe Reporting Designer (Web) offersEPSS 0.9%CVE-2023-37262CRITICALCC: Tweaked SSRF to Cloud Services Metadata Services not Blocked by DefaultEPSS 0.9%CVE-2026-48259CRITICALAdobe Experience Manager | Server-Side Request Forgery (SSRF) (CWE-918)EPSS 0.9%CVE-2021-4075LOWServer-Side Request Forgery (SSRF) in snipe/snipe-itEPSS 0.9%