Weaknesses of type CWE-918

3,037 results

Falsificação de Solicitação no Servidor (SSRF)

O servidor web recupera conteúdo de uma URL fornecida pelo usuário sem validar adequadamente o destino. Isso permite que um atacante force o servidor a fazer requisições para hosts internos, serviços privados ou sistemas que não deveriam ser acessíveis, contornando controles de rede e autenticação.

Example

Uma aplicação oferece um proxy de imagens: recebe a URL 'http://exemplo.com/foto.jpg' e retorna o conteúdo. Um atacante envia 'http://localhost:8080/admin' ou 'http://192.168.1.100/dados-internos', forçando o servidor a acessar sistemas internos e exfiltrar dados sensíveis.

How to mitigate

Valide e faça whitelist de domínios/IPs permitidos antes de fazer a requisição; rejeite URLs locais, privadas (10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16) e metadados (169.254.169.254); use DNS pinning e resoluções contínuas. Em clouds, restrinja acesso ao serviço de metadados via iptables ou IMDSv2.

CVE-2019-9621HIGHZimbra Collaboration Suite before 8.6 patch 13, 8.7.x before 8.7.11 patch 10, and 8.8.x before 8.8.10 patch 7 or 8.8.x before 8.8.11 patch 3EPSS 81.0%KEVCVE-2021-21975HIGHServer Side Request Forgery in vRealize Operations Manager API (CVE-2021-21975) prior to 8.4 may allow a malicious actor with network accessEPSS 78.3%KEVCVE-2016-3718MEDIUMThe (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request EPSS 76.7%KEVCVE-2022-26135MEDIUMA vulnerability in Mobile Plugin for Jira Data Center and Server allows a remote, authenticated user (including a user who joined via the siEPSS 71.6%CVE-2022-1386—Fusion Builder < 3.6.2 - Unauthenticated SSRFEPSS 71.4%CVE-2021-32682CRITICALMultiple vulnerabilities leading to RCEEPSS 69.9%CVE-2021-29490MEDIUMUnauthenticated GET requests through Remote Image endpointsEPSS 69.9%CVE-2020-10770—A flaw was found in Keycloak before 13.0.0, where it is possible to force the server to call out an unverified URL using the OIDC parameter EPSS 69.7%CVE-2024-38472HIGHApache HTTP Server on WIndows UNC SSRFEPSS 69.5%CVE-2025-27817HIGHApache Kafka Client: Arbitrary file read and SSRF vulnerabilityEPSS 68.8%CVE-2023-43795HIGHWPS Server Side Request Forgery in GeoServerEPSS 67.7%CVE-2023-50968—Apache OFBiz: Arbitrary file properties reading and SSRF attackEPSS 63.4%CVE-2021-24472—Onair2 < 3.9.9.2 & KenthaRadio < 2.0.2 - Unauthenticated RFI and SSRFEPSS 56.6%CVE-2021-22175MEDIUMWhen requests to the internal network for webhooks are enabled, a server-side request forgery vulnerability in GitLab affecting all versionsEPSS 53.4%KEVCVE-2024-32964CRITICALlobe-chat `/api/proxy` endpoint Server-Side Request Forgery vulnerabilityEPSS 53.0%CVE-2021-21342MEDIUMA Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local hostEPSS 50.0%CVE-2022-31188HIGHServer-Side Request Forgery Vulnerability in Computer Vision Annotation Tool (CVAT)EPSS 48.6%CVE-2024-47008HIGHServer-side request forgery in Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to leak sensitive information.EPSS 47.1%CVE-2021-21349MEDIUMA Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local hostEPSS 46.8%CVE-2026-33626HIGHLMDeploy Vulnerable to Server-Side Request Forgery (SSRF) via Vision-Language Image LoadingEPSS 45.3%