Weaknesses of type CWE-918

3,038 results

Falsificação de Solicitação no Servidor (SSRF)

O servidor web recupera conteúdo de uma URL fornecida pelo usuário sem validar adequadamente o destino. Isso permite que um atacante force o servidor a fazer requisições para hosts internos, serviços privados ou sistemas que não deveriam ser acessíveis, contornando controles de rede e autenticação.

Example

Uma aplicação oferece um proxy de imagens: recebe a URL 'http://exemplo.com/foto.jpg' e retorna o conteúdo. Um atacante envia 'http://localhost:8080/admin' ou 'http://192.168.1.100/dados-internos', forçando o servidor a acessar sistemas internos e exfiltrar dados sensíveis.

How to mitigate

Valide e faça whitelist de domínios/IPs permitidos antes de fazer a requisição; rejeite URLs locais, privadas (10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16) e metadados (169.254.169.254); use DNS pinning e resoluções contínuas. Em clouds, restrinja acesso ao serviço de metadados via iptables ou IMDSv2.

CVE-2023-37379—Apache Airflow: Exposure of sensitive connection information, DOS and SSRF on "test connection" featureEPSS 2.0%CVE-2026-40280HIGHGotenberg SSRF via case-insensitive URL scheme bypass in webhook and downloadFrom deny-listsEPSS 1.9%CVE-2021-36043HIGHMagento Commerce Authenticated Blind SSRF Could Lead To Remote Code ExecutionEPSS 1.9%CVE-2025-54249MEDIUMAdobe Experience Manager | Server-Side Request Forgery (SSRF) (CWE-918)EPSS 1.9%CVE-2026-73297MEDIUMMicrosoft UFO: IPv6 transition address bypass of SSRF guard in URL validationEPSS 1.9%CVE-2026-49869CRITICALKestra: Unauthenticated Remote Code Execution via Authentication Bypass in `AuthenticationFilter`EPSS 1.9%KEVCVE-2024-55875CRITICALhttp4k has a potential XXE (XML External Entity Injection) vulnerabilityEPSS 1.9%CVE-2026-40175MEDIUMAxios has Unrestricted Cloud Metadata Exfiltration via Header Injection ChainEPSS 1.9%CVE-2026-60105HIGHMonsta FTP < 2.14.5 SSRF via IPv4-Mapped IPv6 Address BypassEPSS 1.9%CVE-2020-15152CRITICALServer-Side Request Forgery in ftp-srvEPSS 1.9%CVE-2022-2339CRITICALServer-Side Request Forgery (SSRF) in nocodb/nocodbEPSS 1.9%CVE-2025-47733CRITICALMicrosoft Power Apps Information Disclosure VulnerabilityEPSS 1.8%CVE-2024-38109CRITICALAzure Health Bot Elevation of Privilege VulnerabilityEPSS 1.8%CVE-2026-54157CRITICALLobeHub: Unauthenticated SSRF in `/webapi/proxy`EPSS 1.8%CVE-2025-34282MEDIUMThingsBoard < v4.2.1 SVG Image SSRFEPSS 1.8%CVE-2022-24969—bypass of CVE-2021-25640EPSS 1.8%CVE-2023-24954MEDIUMMicrosoft SharePoint Server Information Disclosure VulnerabilityEPSS 1.8%CVE-2019-11897HIGHServer-side request forgery in the backup & restore functionality of ProSyst mBS SDK and Bosch IoT Gateway SoftwareEPSS 1.8%CVE-2026-25545MEDIUMAstro has Full-Read SSRF in error rendering via Host: header injectionEPSS 1.8%CVE-2022-1767HIGHServer-Side Request Forgery (SSRF) in jgraph/drawioEPSS 1.8%