Fallos del tipo CWE-918

3102 resultados

Server-Side Request Forgery (SSRF)

Ocorre quando a aplicação web busca conteúdo de uma URL fornecida pelo usuário sem validar adequadamente o destino. Um atacante consegue fazer o servidor requisitar URLs não autorizadas — internas, administrativas ou de terceiros — aproveitando a confiança e as permissões que o servidor possui na rede.

Ejemplo

Um sistema permite gerar thumbnails de imagens externas: o usuário passa uma URL e o servidor faz o download. Um atacante envia 'http://localhost:8080/admin' e consegue acessar painéis administrativos internos que não deveria. Ou envia 'http://169.254.169.254/latest/meta-data' em ambientes AWS e rouba credenciais.

Cómo mitigar

Mantenha uma whitelist rigorosa de domínios e IPs permitidos; bloqueie ranges privados (10.0.0.0/8, 127.0.0.0/8, 169.254.0.0/16) e metadados-servers por padrão; valide URLs antes de fazer requisições; use bibliotecas de parsing robustas; considere isolamento de rede para requisições externas.

CVE-2025-14627MEDIUMWP Import – Ultimate CSV XML Importer for WordPress <= 7.35 - Authenticated (Contributor+) Server-Side Request Forgery via Bitly Shortlink BypassEPSS 0.3%CVE-2025-14793MEDIUMDK PDF – WordPress PDF Generator <= 2.3.0 - Authenticated (Author+) Server-Side Request ForgeryEPSS 0.3%CVE-2024-33629MEDIUMWordPress Auto Featured Image (Auto Post Thumbnail) plugin <= 4.0.0 - Server Side Request Forgery (SSRF) vulnerabilityEPSS 0.3%CVE-2024-53738MEDIUMWordPress Asset CleanUp: Page Speed Booster plugin <=1.3.9.8 - Server Side Request Forgery (SSRF) vulnerabilityEPSS 0.3%CVE-2025-50228CRITICALJizhicms v2.5.4 is vulnerable to Server-Side Request Forgery (SSRF) in User Evaluation, Message, and Comment modules.EPSS 0.3%CVE-2026-17565HIGHAnimation Addons for Elementor < 2.7.2 - Unauthenticated Server-Side Request ForgeryEPSS 0.3%CVE-2026-54794HIGHDell OpenManage Enterprise, versions prior to 4.7.0, contains a Server-Side Request Forgery (SSRF) vulnerability. An unauthenticated attackeEPSS 0.3%CVE-2026-12986HIGHA critical vulnerability in Admin GUI in Payara Server Full 4.x, 5.x, 6.x, 7.x, 7.2026.x, 6.2025.x, 6.2024.x on All platforms that allows thEPSS 0.3%CVE-2025-60898MEDIUMAn unauthenticated server-side request forgery (SSRF) vulnerability in the Thumbnail via-uri endpoint of Halo CMS 2.21 allows a remote attacEPSS 0.3%CVE-2026-39922MEDIUMGeoNode SSRF via Service RegistrationEPSS 0.3%CVE-2026-33126MEDIUMFrigate has SSRF vulnerability in /ffprobe endpointEPSS 0.3%CVE-2026-42336MEDIUMMaxKB: SSRF Bypass via DNS Rebinding in MaxKB OSS URL FetchEPSS 0.3%CVE-2025-8013LOWQuttera Web Malware Scanner <= 3.5.1.41 - Authenticated (Administrator+) Server-Side Request ForgeryEPSS 0.3%CVE-2024-54197HIGHServer-Side Request Forgery in SAP NetWeaver Administrator (System Overview)EPSS 0.3%CVE-2025-70027HIGHAn issue pertaining to CWE-918: Server-Side Request Forgery was discovered in Sunbird-Ed SunbirdEd-portal v1.13.4. This allows attackers to EPSS 0.3%CVE-2024-38728HIGHWordPress Seraphinite Post .DOCX Source plugin <= 2.16.9 - Server Side Request Forgery (SSRF) vulnerabilityEPSS 0.3%CVE-2026-41195MEDIUMmosparo: Rule package source URL stored SSRF enables internal HTTP probingEPSS 0.3%CVE-2026-10276MEDIUMhekmon8 Jenkins-server-mcp get_build_status/get_build_log/trigger_build index.ts jobPath server-side request forgeryEPSS 0.3%CVE-2026-19075MEDIUMAll-in-One Video Gallery < 4.9.2 - Subscriber+ Server-Side Request Forgery via 'vdl' ParameterEPSS 0.3%CVE-2026-44441MEDIUMERPNext: Possible SSRF by any authenticated userEPSS 0.3%