Fallos del tipo CWE-918

3048 resultados

Server-Side Request Forgery (SSRF)

Ocorre quando a aplicação web busca conteúdo de uma URL fornecida pelo usuário sem validar adequadamente o destino. Um atacante consegue fazer o servidor requisitar URLs não autorizadas — internas, administrativas ou de terceiros — aproveitando a confiança e as permissões que o servidor possui na rede.

Ejemplo

Um sistema permite gerar thumbnails de imagens externas: o usuário passa uma URL e o servidor faz o download. Um atacante envia 'http://localhost:8080/admin' e consegue acessar painéis administrativos internos que não deveria. Ou envia 'http://169.254.169.254/latest/meta-data' em ambientes AWS e rouba credenciais.

Cómo mitigar

Mantenha uma whitelist rigorosa de domínios e IPs permitidos; bloqueie ranges privados (10.0.0.0/8, 127.0.0.0/8, 169.254.0.0/16) e metadados-servers por padrão; valide URLs antes de fazer requisições; use bibliotecas de parsing robustas; considere isolamento de rede para requisições externas.

CVE-2024-21642HIGHD-Tale server-side request forgery through Web uploadsEPSS 0.7%CVE-2025-62207HIGHAzure Monitor Elevation of Privilege VulnerabilityEPSS 0.7%CVE-2022-41906HIGHOpenSearch Notifications is vulnerable to Server-Side Request Forgery (SSRF) EPSS 0.7%CVE-2023-48240CRITICALXWiki Platform sends cookies to external images in rendered diff and is vulnerable to server side request forgeryEPSS 0.7%CVE-2025-64663CRITICALCustom Question Answering Elevation of Privilege VulnerabilityEPSS 0.7%CVE-2022-27622MEDIUMServer-Side Request Forgery (SSRF) vulnerability in Package Center functionality in Synology DiskStation Manager (DSM) before 7.1-42661 alloEPSS 0.7%CVE-2023-7037MEDIUMautomad FileController.php import server-side request forgeryEPSS 0.7%CVE-2022-2267—MailChimp for Woocommerce < 2.7.1 - Subscriber+ SSRFEPSS 0.7%CVE-2023-40630CRITICALExtension - joomcode.com - Unauthenticated LFI/SSRF in JCDashboards component for Joomla 1.0.0-1.1.30EPSS 0.7%CVE-2025-10211MEDIUMyanyutao0402 ChanCMS getArticle CollectController server-side request forgeryEPSS 0.7%CVE-2026-33107CRITICALAzure Databricks Elevation of Privilege VulnerabilityEPSS 0.7%CVE-2023-49094MEDIUMSymbolicator Server Side Request Forgery vulnerabilityEPSS 0.7%CVE-2026-32186CRITICALMicrosoft Bing Elevation of Privilege VulnerabilityEPSS 0.7%CVE-2023-3236MEDIUMmccms Comic.php pic_save server-side request forgeryEPSS 0.7%CVE-2023-6853MEDIUMkalcaddle KodExplorer app.php index server-side request forgeryEPSS 0.7%CVE-2023-3235MEDIUMmccms Comic.php pic_api server-side request forgeryEPSS 0.7%CVE-2024-36448HIGHApache IoTDB Workbench: SSRF Vulnerability (EOL)EPSS 0.7%CVE-2026-66304HIGHSkype for Business Information Disclosure VulnerabilityEPSS 0.7%CVE-2026-19233HIGHCWE-918: Server-Side Request Forgery (SSRF) vulnerability exists that could cause unauthorized command execution and disclosure of server daEPSS 0.7%CVE-2025-56520MEDIUMDify v1.6.0 was discovered to contain a Server-Side Request Forgery (SSRF) via the component controllers.console.remote_files.RemoteFileUploEPSS 0.7%