Weaknesses of type CWE-918

3,076 results

Falsificação de Solicitação no Servidor (SSRF)

O servidor web recupera conteúdo de uma URL fornecida pelo usuário sem validar adequadamente o destino. Isso permite que um atacante force o servidor a fazer requisições para hosts internos, serviços privados ou sistemas que não deveriam ser acessíveis, contornando controles de rede e autenticação.

Example

Uma aplicação oferece um proxy de imagens: recebe a URL 'http://exemplo.com/foto.jpg' e retorna o conteúdo. Um atacante envia 'http://localhost:8080/admin' ou 'http://192.168.1.100/dados-internos', forçando o servidor a acessar sistemas internos e exfiltrar dados sensíveis.

How to mitigate

Valide e faça whitelist de domínios/IPs permitidos antes de fazer a requisição; rejeite URLs locais, privadas (10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16) e metadados (169.254.169.254); use DNS pinning e resoluções contínuas. Em clouds, restrinja acesso ao serviço de metadados via iptables ou IMDSv2.

CVE-2026-56348MEDIUMn8n - Credential Exfiltration via Allowed HTTP Request Domains Bypass in Dynamic Node Parameters EndpointEPSS 0.5%CVE-2024-0601MEDIUMZhongFuCheng3y Austin Email Message Template AustinFileUtils.java getRemoteUrl2File server-side request forgeryEPSS 0.5%CVE-2023-28633LOWGLPI vulnerable to Blind Server-Side Request Forgery (SSRF) in RSS feedsEPSS 0.5%CVE-2026-4302HIGHWowOptin: Next-Gen Popup Maker <= 1.4.29 - Unauthenticated Server-Side Request Forgery via 'link' Parameter in REST APIEPSS 0.5%CVE-2025-0188MEDIUMSSRF in gaizhenbiao/chuanhuchatgptEPSS 0.5%CVE-2022-48477MEDIUMIn JetBrains Hub before 2023.1.15725 SSRF protection in Auth Module integration was missing EPSS 0.5%CVE-2024-0308MEDIUMInis Proxy.php server-side request forgeryEPSS 0.5%CVE-2026-59707CRITICALLocalAI - Server-Side Request Forgery via POST /models/applyEPSS 0.5%CVE-2026-85675HIGHOWL DocumentProcessingToolkit Server-Side Request Forgery via URL FetchingEPSS 0.5%CVE-2026-85699HIGHjina-ai reader server-side request forgery via redirect validation bypassEPSS 0.5%CVE-2026-92719HIGHQuickwit through 0.9.0 SSRF via SQS queue_url ParameterEPSS 0.5%CVE-2026-48128MEDIUMBudibase: SSRF via User-Controlled queryId in Automation Execute Query StepEPSS 0.5%CVE-2026-82270HIGHPortkey AI Gateway Server-Side Request Forgery via /v1/proxy/*EPSS 0.5%CVE-2026-72606HIGHPinry Pinry - Server-Side Request ForgeryEPSS 0.5%CVE-2022-46830MEDIUMIn JetBrains TeamCity between 2022.10 and 2022.10.1 a custom STS endpoint allowed internal port scanning.EPSS 0.5%CVE-2026-30858MEDIUMWeKnora: DNS Rebinding Vulnerability in web_fetch Tool Allows SSRF to Internal ResourcesEPSS 0.5%CVE-2026-32949HIGHSQLBot: SSRF to Arbitrary File Read (AFR) via Rogue MySQLEPSS 0.5%CVE-2025-68437MEDIUMCraft CMS vulnerable to Server-Side Request Forgery (SSRF) via GraphQL Asset Upload MutationEPSS 0.5%CVE-2026-56285HIGHNitter - Server-Side Request Forgery in /video Media Proxy EndpointEPSS 0.5%CVE-2026-54729HIGHdssrf: any users using 1.1.1.1 DNS is impacted by SSRFEPSS 0.5%