Weaknesses of type CWE-918

3,091 results

Falsificação de Solicitação no Servidor (SSRF)

O servidor web recupera conteúdo de uma URL fornecida pelo usuário sem validar adequadamente o destino. Isso permite que um atacante force o servidor a fazer requisições para hosts internos, serviços privados ou sistemas que não deveriam ser acessíveis, contornando controles de rede e autenticação.

Example

Uma aplicação oferece um proxy de imagens: recebe a URL 'http://exemplo.com/foto.jpg' e retorna o conteúdo. Um atacante envia 'http://localhost:8080/admin' ou 'http://192.168.1.100/dados-internos', forçando o servidor a acessar sistemas internos e exfiltrar dados sensíveis.

How to mitigate

Valide e faça whitelist de domínios/IPs permitidos antes de fazer a requisição; rejeite URLs locais, privadas (10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16) e metadados (169.254.169.254); use DNS pinning e resoluções contínuas. Em clouds, restrinja acesso ao serviço de metadados via iptables ou IMDSv2.

CVE-2026-40160HIGHPraisonAIAgents has SSRF via unvalidated URL in `web_crawl` httpx fallbackEPSS 0.4%CVE-2026-40566MEDIUMFreeScout vulnerable to SSRF via IMAP/SMTP Connection Test EndpointsEPSS 0.4%CVE-2026-19340MEDIUManubissbe ProjectHub-Mcp Webhooks API complete_backend.js server-side request forgeryEPSS 0.4%CVE-2026-19375MEDIUMdmitriiweb article-scraper-mcp server.py fetch_article server-side request forgeryEPSS 0.4%CVE-2025-27501HIGHServer Side Request Forgery in Ziti ConsoleEPSS 0.4%CVE-2026-84697MEDIUMMailpit SSRF Deny List Bypass via Azure Metadata and IPv6 PrefixEPSS 0.4%CVE-2026-33659LOWEspoCRM: SSRF via DNS Rebinding in Attachment fromImageUrl Endpoint Allows Internal Network AccessEPSS 0.4%CVE-2026-34443MEDIUMFreeScout: SSRF protection bypass via broken CIDR check in checkIpByMask()EPSS 0.4%CVE-2026-33399HIGHWallos: SSRF Bypass - Incomplete Fix for CVE-2026-30839/30840EPSS 0.4%CVE-2026-56734MEDIUMZammad: Avatar Image URL Server-Side Request ForwardingEPSS 0.4%CVE-2026-40100MEDIUMFastGPT has Unauthenticated SSRF in /api/core/app/mcpTools/runTool via missing CHECK_INTERNAL_IP defaultEPSS 0.4%CVE-2026-3052MEDIUMDataLinkDC dinky Flink Proxy Controller FlinkProxyController.java proxyUba server-side request forgeryEPSS 0.4%CVE-2023-36679HIGHWordPress Spectra plugin <= 2.6.6 - Server Side Request Forgery (SSRF) vulnerabilityEPSS 0.4%CVE-2026-47160MEDIUMVaultwarden: Server-side request forgery (SSRF) via Icon Endpoint Decimal/Hex/Octal IP BypassEPSS 0.4%CVE-2026-84175MEDIUMIn Eclipse Ditto versions 3.0.0 to 3.9.6, the Things service fetches WoT (Web of Things) ThingModels over HTTP from URLs supplied by API useEPSS 0.4%CVE-2025-2243MEDIUMSSRF in GravityZone Console via DNS Truncation (VA-12634)EPSS 0.4%CVE-2026-88403MEDIUMA Server-Side Request Forgery (SSRF) in the serverRequest function of nocobase v2.1.21 allows authenticated attackers to scan internal resouEPSS 0.4%CVE-2021-38132MEDIUMPossible External service interaction VulnerabilityEPSS 0.4%CVE-2024-10206MEDIUMServer-Side Request Forgery (unauthenticated) in APROL Web PortalEPSS 0.4%CVE-2026-15750MEDIUMmastergo-design mastergo-magic-mcp mcp__getComponentLink get-component-link.ts z.string server-side request forgeryEPSS 0.4%