Weaknesses of type CWE-918

3,050 results

Falsificação de Solicitação no Servidor (SSRF)

O servidor web recupera conteúdo de uma URL fornecida pelo usuário sem validar adequadamente o destino. Isso permite que um atacante force o servidor a fazer requisições para hosts internos, serviços privados ou sistemas que não deveriam ser acessíveis, contornando controles de rede e autenticação.

Example

Uma aplicação oferece um proxy de imagens: recebe a URL 'http://exemplo.com/foto.jpg' e retorna o conteúdo. Um atacante envia 'http://localhost:8080/admin' ou 'http://192.168.1.100/dados-internos', forçando o servidor a acessar sistemas internos e exfiltrar dados sensíveis.

How to mitigate

Valide e faça whitelist de domínios/IPs permitidos antes de fazer a requisição; rejeite URLs locais, privadas (10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16) e metadados (169.254.169.254); use DNS pinning e resoluções contínuas. Em clouds, restrinja acesso ao serviço de metadados via iptables ou IMDSv2.

CVE-2023-40630CRITICALExtension - joomcode.com - Unauthenticated LFI/SSRF in JCDashboards component for Joomla 1.0.0-1.1.30EPSS 0.7%CVE-2023-49094MEDIUMSymbolicator Server Side Request Forgery vulnerabilityEPSS 0.7%CVE-2025-10211MEDIUMyanyutao0402 ChanCMS getArticle CollectController server-side request forgeryEPSS 0.7%CVE-2023-3235MEDIUMmccms Comic.php pic_api server-side request forgeryEPSS 0.7%CVE-2023-3236MEDIUMmccms Comic.php pic_save server-side request forgeryEPSS 0.7%CVE-2023-6853MEDIUMkalcaddle KodExplorer app.php index server-side request forgeryEPSS 0.7%CVE-2024-36448HIGHApache IoTDB Workbench: SSRF Vulnerability (EOL)EPSS 0.7%CVE-2026-8606HIGHServer-Side Request Forgery in GitHub Enterprise Server via Advisory Package URL EndpointEPSS 0.7%CVE-2026-19233HIGHCWE-918: Server-Side Request Forgery (SSRF) vulnerability exists that could cause unauthorized command execution and disclosure of server daEPSS 0.7%CVE-2025-56520MEDIUMDify v1.6.0 was discovered to contain a Server-Side Request Forgery (SSRF) via the component controllers.console.remote_files.RemoteFileUploEPSS 0.7%CVE-2022-37313MEDIUMOX App Suite through 7.10.6 allows SSRF because the anti-SSRF protection mechanism only checks the first DNS AA or AAAA record.EPSS 0.7%CVE-2021-42079MEDIUMSSRF vulnerability in OSNEXUS QuantaStor before 6.0.0.355EPSS 0.7%CVE-2022-3247MEDIUMBlog2Social < 6.9.10 - Subscriber+ SSRFEPSS 0.7%CVE-2024-41813HIGHtxtdot SSRF vulnerability in /proxyEPSS 0.7%CVE-2023-50258MEDIUMBlind SSRF in `/home/testdiscord` endpointEPSS 0.7%CVE-2026-8768MEDIUMvercel ai provider-utils download-blob.ts validateDownloadUrl server-side request forgeryEPSS 0.7%CVE-2024-41812HIGHtxtdot SSRF vulnerability in /getEPSS 0.7%CVE-2023-47121LOWDiscourse SSRF vulnerability in EmbeddingEPSS 0.7%CVE-2025-6454HIGHServer-Side Request Forgery (SSRF) in GitLabEPSS 0.7%CVE-2024-3095MEDIUMSSRF in Langchain Web Research Retriever in langchain-ai/langchainEPSS 0.7%