Weaknesses of type CWE-918

2,168 results
CVE-2023-36388MEDIUMApache Superset: Improper API permission for low privilege users allows for SSRFEPSS 0.8%CVE-2023-27451HIGHWordPress Instant Images Plugin <= 5.1.0.2 is vulnerable to Server Side Request Forgery (SSRF)EPSS 0.8%CVE-2021-3758MEDIUMServer-Side Request Forgery (SSRF) in bookstackapp/bookstackEPSS 0.8%CVE-2023-48306MEDIUMNextcloud Server DNS pin middleware can be tricked into DNS rebinding allowing SSRFEPSS 0.8%CVE-2022-29188MEDIUMSmokescreen SSRF via deny list bypass (square brackets) in SmokescreenEPSS 0.8%CVE-2024-45291MEDIUMPath traversal and Server-Side Request Forgery in HTML writer when embedding images is enabled in PHPSpreadsheetEPSS 0.8%CVE-2024-38183CRITICALGroupMe Elevation of Privilege VulnerabilityEPSS 0.8%CVE-2022-31196HIGHServer-Side Request Forgery (SSRF) vulnerability in DatabasirEPSS 0.8%CVE-2022-44729—Apache XML Graphics Batik: Information disclosure vulnerabilityEPSS 0.8%CVE-2022-23080—directus - SSRF which leads to internal port scanEPSS 0.8%CVE-2024-29007HIGHApache CloudStack: When downloading templates or ISOs, the management server and SSVM follow HTTP redirects with potentially dangerous consequencesEPSS 0.8%CVE-2021-37498MEDIUMAn SSRF issue was discovered in Reprise License Manager (RLM) web interface through 14.2BL4 that allows remote attackers to trigger outboundEPSS 0.8%CVE-2023-26435MEDIUMIt was possible to call filesystem and network references using the local LibreOffice instance using manipulated ODT documents. Attackers coEPSS 0.8%CVE-2024-7740MEDIUMwanglongcn ltcms API Endpoint download server-side request forgeryEPSS 0.8%CVE-2021-36202HIGHMetasys UIEPSS 0.8%CVE-2023-42439HIGHGeoNode SSRF Bypass to return internal host dataEPSS 0.8%CVE-2024-1233HIGHEap: wildfly-elytron has a ssrf security issueEPSS 0.8%CVE-2023-22493HIGHRSSHub is vulnerable to SSRF (Server-Side Request Forgery)EPSS 0.8%CVE-2025-58179HIGHAstro Cloudflare adapter is vulnerable to Server-Side Request Forgery via /_image endpointEPSS 0.8%CVE-2024-43204HIGHApache HTTP Server: SSRF with mod_headers setting Content-Type headerEPSS 0.8%