Weaknesses of type CWE-918

3,054 results

Falsificação de Solicitação no Servidor (SSRF)

O servidor web recupera conteúdo de uma URL fornecida pelo usuário sem validar adequadamente o destino. Isso permite que um atacante force o servidor a fazer requisições para hosts internos, serviços privados ou sistemas que não deveriam ser acessíveis, contornando controles de rede e autenticação.

Example

Uma aplicação oferece um proxy de imagens: recebe a URL 'http://exemplo.com/foto.jpg' e retorna o conteúdo. Um atacante envia 'http://localhost:8080/admin' ou 'http://192.168.1.100/dados-internos', forçando o servidor a acessar sistemas internos e exfiltrar dados sensíveis.

How to mitigate

Valide e faça whitelist de domínios/IPs permitidos antes de fazer a requisição; rejeite URLs locais, privadas (10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16) e metadados (169.254.169.254); use DNS pinning e resoluções contínuas. Em clouds, restrinja acesso ao serviço de metadados via iptables ou IMDSv2.

CVE-2026-76795MEDIUMAeternaLabsHQ PullMD REST API Endpoint api server-side request forgeryEPSS 0.6%CVE-2026-15927MEDIUMQuay: mirror-registry: ssrf: repo-level mirror accepts external_reference without url validationEPSS 0.6%CVE-2025-34021HIGHSelea Targa IP OCR-ANPR Camera Server-Side Request ForgeryEPSS 0.6%CVE-2026-57575MEDIUMMisskey: SSRF bypass in URL PreviewEPSS 0.6%CVE-2022-42494LOWWordPress All in One SEO Pro plugin <= 4.2.5.1 - Server Side Request Forgery (SSRF) vulnerabilityEPSS 0.6%CVE-2023-50259MEDIUMBlind SSRF in /home/testslack endpoint EPSS 0.6%CVE-2023-45660MEDIUMRequire strict cookies for image proxy requests in Nextcloud MailEPSS 0.6%CVE-2023-1046MEDIUMMuYuCMS getFile.html server-side request forgeryEPSS 0.6%CVE-2026-95679MEDIUMMISP Unauthenticated Blind SSRF via XML Body ProcessingEPSS 0.6%CVE-2024-11618MEDIUMIPC Unigy Management System HTTP Request server-side request forgeryEPSS 0.6%CVE-2025-64430HIGHParse Server Vulnerable to Server-Side Request Forgery (SSRF) in File Upload via URI FormatEPSS 0.6%CVE-2024-48874CRITICALRuijie Reyee OS Server-Side Request ForgeryEPSS 0.6%CVE-2022-45027MEDIUMperfSONAR before 4.4.6, when performing participant discovery, incorrectly uses an HTTP request header value to determine a local address.EPSS 0.6%CVE-2024-39687HIGHFedify vulnerable to allowing access to internal network resourcesEPSS 0.6%CVE-2023-26438MEDIUMExternal service lookups for a number of protocols were vulnerable to a time-of-check/time-of-use (TOCTOU) weakness, involving the JDK DNS cEPSS 0.6%CVE-2025-54590MEDIUMwebfinger.js is vulnerable to Blind SSRF attacks through localhostEPSS 0.6%CVE-2026-48205CRITICALApache Camel DNS: The dns.* and term Exchange header constants used non-Camel-prefixed names that bypass the HTTP header filter, allowing an HTTP client to influence internal behaviourEPSS 0.6%CVE-2026-48203CRITICALApache Camel: Camel-Solr: The SolrParam. and SolrField. Exchange header prefixes used non-Camel-prefixed names that bypass the HTTP header filter, allowing an HTTP client to inject Solr query parameters (server-side request forgery) and document fieldsEPSS 0.6%CVE-2023-31848HIGHdavinci 0.3.0-rc is vulnerable to Server-side request forgery (SSRF).EPSS 0.6%CVE-2021-37498MEDIUMAn SSRF issue was discovered in Reprise License Manager (RLM) web interface through 14.2BL4 that allows remote attackers to trigger outboundEPSS 0.6%