Fallos del tipo CWE-918

3096 resultados

Server-Side Request Forgery (SSRF)

Ocorre quando a aplicação web busca conteúdo de uma URL fornecida pelo usuário sem validar adequadamente o destino. Um atacante consegue fazer o servidor requisitar URLs não autorizadas — internas, administrativas ou de terceiros — aproveitando a confiança e as permissões que o servidor possui na rede.

Ejemplo

Um sistema permite gerar thumbnails de imagens externas: o usuário passa uma URL e o servidor faz o download. Um atacante envia 'http://localhost:8080/admin' e consegue acessar painéis administrativos internos que não deveria. Ou envia 'http://169.254.169.254/latest/meta-data' em ambientes AWS e rouba credenciais.

Cómo mitigar

Mantenha uma whitelist rigorosa de domínios e IPs permitidos; bloqueie ranges privados (10.0.0.0/8, 127.0.0.0/8, 169.254.0.0/16) e metadados-servers por padrão; valide URLs antes de fazer requisições; use bibliotecas de parsing robustas; considere isolamento de rede para requisições externas.

CVE-2026-28416HIGHGradio has SSRF via Malicious `proxy_url` Injection in `gr.load()` Config ProcessingEPSS 0.3%CVE-2026-84207MEDIUMHeym before 0.0.98 SSRF via WebSocket endpointsEPSS 0.3%CVE-2026-44936MEDIUMRancher Fleet SSRF in Bundle Reader via Unvalidated Helm Repository URL in fleet.yamlEPSS 0.3%CVE-2026-61429HIGHPraisonAI before 1.6.78 SSRF via Crawl4AI Chromium backendEPSS 0.3%CVE-2026-85650MEDIUMTrigger.dev before 4.5.2 Server-Side Request Forgery via webhook alert-channelEPSS 0.3%CVE-2026-12564CRITICALAutomation-controller: automation-controller: kubernetes service account token exfiltration via hashicorp vault credential ssrfEPSS 0.3%CVE-2026-28680CRITICALGhostfolio: Full-Read SSRF in Manual Asset ImportEPSS 0.3%CVE-2024-37157MEDIUMDiscourse vulnerable to Server-Side Request Forgery via FastImageEPSS 0.3%CVE-2025-14518MEDIUMPowerJob Network Request PingPongUtils.java checkConnectivity server-side request forgeryEPSS 0.3%CVE-2026-3189LOWfeiyuchuixue sz-boot-parent download server-side request forgeryEPSS 0.3%CVE-2026-83744MEDIUMinvoiceninja Invoice Ninja invoices Endpoint Purify.php isHostSafe server-side request forgeryEPSS 0.3%CVE-2026-0745MEDIUMUser Language Switch <= 1.6.10 - Authenticated (Administrator+) Server-Side Request Forgery via 'info_language' ParameterEPSS 0.3%CVE-2026-61430HIGHPraisonAI before 1.6.78 DNS Rebinding SSRF via web_crawlEPSS 0.3%CVE-2026-16074MEDIUMAstrBotDevs AstrBot Plugin Update plugin.py update_all_plugins server-side request forgeryEPSS 0.3%CVE-2026-6119MEDIUMAstrBotDevs AstrBot API Endpoint post_data.get server-side request forgeryEPSS 0.3%CVE-2026-18774MEDIUMNousResearch hermes-agent xAI Image Generation Provider image_gen_provider.py save_url_image server-side request forgeryEPSS 0.3%CVE-2023-29260MEDIUMIBM Sterling Connect:Express for UNIX server-side request forgeryEPSS 0.3%CVE-2026-15508MEDIUMHelicone ai-gateway AWS Metadata Service service.rs build_target_url server-side request forgeryEPSS 0.3%CVE-2026-6649MEDIUMQibo CMS headers server-side request forgeryEPSS 0.3%CVE-2026-6979MEDIUMdevlikeapro WAHA API Request media.controller.ts server-side request forgeryEPSS 0.3%