Fallos del tipo CWE-918

3104 resultados

Server-Side Request Forgery (SSRF)

Ocorre quando a aplicação web busca conteúdo de uma URL fornecida pelo usuário sem validar adequadamente o destino. Um atacante consegue fazer o servidor requisitar URLs não autorizadas — internas, administrativas ou de terceiros — aproveitando a confiança e as permissões que o servidor possui na rede.

Ejemplo

Um sistema permite gerar thumbnails de imagens externas: o usuário passa uma URL e o servidor faz o download. Um atacante envia 'http://localhost:8080/admin' e consegue acessar painéis administrativos internos que não deveria. Ou envia 'http://169.254.169.254/latest/meta-data' em ambientes AWS e rouba credenciais.

Cómo mitigar

Mantenha uma whitelist rigorosa de domínios e IPs permitidos; bloqueie ranges privados (10.0.0.0/8, 127.0.0.0/8, 169.254.0.0/16) e metadados-servers por padrão; valide URLs antes de fazer requisições; use bibliotecas de parsing robustas; considere isolamento de rede para requisições externas.

CVE-2024-30531MEDIUMWordPress Nelio Content plugin <= 3.2.0 - Server Side Request Forgery (SSRF) vulnerabilityEPSS 0.3%CVE-2026-50552MEDIUMKoel: Server-Side Request Forgery (SSRF) in radio station creation due to missing validation bailEPSS 0.3%CVE-2026-71246MEDIUMPixelfed - Authenticated SSRF via Remote URL SearchEPSS 0.3%CVE-2026-3530MEDIUMOpenID Connect / OAuth client - Moderately critical - Server-side request forgery, Information disclosure - SA-CONTRIB-2026-025EPSS 0.3%CVE-2026-10276MEDIUMhekmon8 Jenkins-server-mcp get_build_status/get_build_log/trigger_build index.ts jobPath server-side request forgeryEPSS 0.3%CVE-2026-10240MEDIUMJeecgBoot test server-side request forgeryEPSS 0.3%CVE-2026-3216MEDIUMDrupal Canvas - Moderately critical - Server-side request forgery, Information disclosure - SA-CONTRIB-2026-017EPSS 0.3%CVE-2026-34170MEDIUMCoolify: Server-Side Request Forgery via attacker-controlled GitHub App API URLEPSS 0.3%CVE-2026-10239MEDIUMJeecgBoot edit WordUtil.addImage server-side request forgeryEPSS 0.3%CVE-2026-2252HIGHXML External Entity (XXE) vulnerability resulting in Server-Side Request Forgery (SSRF)EPSS 0.3%CVE-2026-19486HIGHSSRF in Gemini Enterprise Agent Platform App BuilderEPSS 0.3%CVE-2026-71172MEDIUMDell Cloud Disaster Recovery, versions 20.2 and prior, contain a Server-Side Request Forgery (SSRF) vulnerability. A low privileged attackerEPSS 0.3%CVE-2026-44441MEDIUMERPNext: Possible SSRF by any authenticated userEPSS 0.3%CVE-2026-19075MEDIUMAll-in-One Video Gallery < 4.9.2 - Subscriber+ Server-Side Request Forgery via 'vdl' ParameterEPSS 0.3%CVE-2025-36324MEDIUMVulnerabilities found in Watson Data IntelligenceEPSS 0.3%CVE-2025-27600MEDIUMFastGPT SSRFEPSS 0.3%CVE-2026-77067MEDIUMOmnivore Stored Server-Side Request Forgery via the setWebhook MutationEPSS 0.3%CVE-2025-8529MEDIUMcloudfavorites favorites-web CollectController.java getCollectLogoUrl server-side request forgeryEPSS 0.3%CVE-2025-13147MEDIUMExternal Service Interaction (DNS)EPSS 0.3%CVE-2025-67961MEDIUMWordPress WPO365 plugin <= 40.0 - Server Side Request Forgery (SSRF) vulnerabilityEPSS 0.3%