Fallos del tipo CWE-918

3570 resultados

Server-Side Request Forgery (SSRF)

Ocorre quando a aplicação web busca conteúdo de uma URL fornecida pelo usuário sem validar adequadamente o destino. Um atacante consegue fazer o servidor requisitar URLs não autorizadas — internas, administrativas ou de terceiros — aproveitando a confiança e as permissões que o servidor possui na rede.

Ejemplo

Um sistema permite gerar thumbnails de imagens externas: o usuário passa uma URL e o servidor faz o download. Um atacante envia 'http://localhost:8080/admin' e consegue acessar painéis administrativos internos que não deveria. Ou envia 'http://169.254.169.254/latest/meta-data' em ambientes AWS e rouba credenciais.

Cómo mitigar

Mantenha uma whitelist rigorosa de domínios e IPs permitidos; bloqueie ranges privados (10.0.0.0/8, 127.0.0.0/8, 169.254.0.0/16) e metadados-servers por padrão; valide URLs antes de fazer requisições; use bibliotecas de parsing robustas; considere isolamento de rede para requisições externas.

CVE-2022-0767CRITICALServer-Side Request Forgery (SSRF) in janeczku/calibre-webEPSS 1.0%CVE-2023-50731CRITICALMindsDB has arbitrary file write in file.pyEPSS 1.0%CVE-2024-51981MEDIUMUnauthenticated Server Side Request Forgery (SSRF) via WS-Eventing affecting multiple models from Brother Industries, Ltd, FUJIFILM Business Innovation, Ricoh, and Toshiba Tec, and Konica Minolta, Inc.EPSS 1.0%CVE-2023-25195HIGHApache Fineract: SSRF template type vulnerability in certain authenticated usersEPSS 1.0%CVE-2026-102255CRITICALA Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. By EPSS 1.0%CVE-2024-22205CRITICALWhoogle Search Server Side Request Forgery vulnerabilityEPSS 1.0%CVE-2026-72916MEDIUMMastodon: SSRF Protection Bypass via IPv4-compatible IPv6 AddressesEPSS 1.0%CVE-2026-66304HIGHSkype for Business Information Disclosure VulnerabilityEPSS 1.0%CVE-2026-85917HIGHAzure AI Foundry Elevation of Privilege VulnerabilityEPSS 1.0%CVE-2026-66800HIGHAzure Data Factory Information Disclosure VulnerabilityEPSS 1.0%CVE-2021-33181MEDIUMServer-Side Request Forgery (SSRF) vulnerability in webapi component in Synology Video Station before 2.4.10-1632 allows remote authenticateEPSS 1.0%CVE-2025-6087HIGHSSRF vulnerability in opennextjs-cloudflare via /_next/image endpointEPSS 1.0%CVE-2023-27161HIGHJellyfin up to v10.7.7 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /Repositories. This vulnerability alEPSS 1.0%CVE-2023-41055HIGHLibreY Server-Side Request Forgery (SSRF) vulnerability via wikipedia_language cookieEPSS 1.0%CVE-2022-0339MEDIUMServer-Side Request Forgery (SSRF) in janeczku/calibre-webEPSS 1.0%CVE-2023-42439HIGHGeoNode SSRF Bypass to return internal host dataEPSS 1.0%CVE-2022-39211LOWServer-Side Request Forgery (SSRF) via potential filter bypass in Nextcloud ServerEPSS 1.0%CVE-2023-26492MEDIUMDirectus vulnerable to Server-Side Request Forgery On File ImportEPSS 1.0%CVE-2023-25504MEDIUMApache Superset: Possible SSRF on import datasetsEPSS 1.0%CVE-2023-46502CRITICALAn issue in openCRX v.5.2.2 allows a remote attacker to read internal files and execute server side request forgery attack via insecure DocuEPSS 1.0%