Fallos del tipo CWE-918

3076 resultados

Server-Side Request Forgery (SSRF)

Ocorre quando a aplicação web busca conteúdo de uma URL fornecida pelo usuário sem validar adequadamente o destino. Um atacante consegue fazer o servidor requisitar URLs não autorizadas — internas, administrativas ou de terceiros — aproveitando a confiança e as permissões que o servidor possui na rede.

Ejemplo

Um sistema permite gerar thumbnails de imagens externas: o usuário passa uma URL e o servidor faz o download. Um atacante envia 'http://localhost:8080/admin' e consegue acessar painéis administrativos internos que não deveria. Ou envia 'http://169.254.169.254/latest/meta-data' em ambientes AWS e rouba credenciais.

Cómo mitigar

Mantenha uma whitelist rigorosa de domínios e IPs permitidos; bloqueie ranges privados (10.0.0.0/8, 127.0.0.0/8, 169.254.0.0/16) e metadados-servers por padrão; valide URLs antes de fazer requisições; use bibliotecas de parsing robustas; considere isolamento de rede para requisições externas.

CVE-2026-56348MEDIUMn8n - Credential Exfiltration via Allowed HTTP Request Domains Bypass in Dynamic Node Parameters EndpointEPSS 0.5%CVE-2024-0601MEDIUMZhongFuCheng3y Austin Email Message Template AustinFileUtils.java getRemoteUrl2File server-side request forgeryEPSS 0.5%CVE-2023-28633LOWGLPI vulnerable to Blind Server-Side Request Forgery (SSRF) in RSS feedsEPSS 0.5%CVE-2026-4302HIGHWowOptin: Next-Gen Popup Maker <= 1.4.29 - Unauthenticated Server-Side Request Forgery via 'link' Parameter in REST APIEPSS 0.5%CVE-2025-0188MEDIUMSSRF in gaizhenbiao/chuanhuchatgptEPSS 0.5%CVE-2022-48477MEDIUMIn JetBrains Hub before 2023.1.15725 SSRF protection in Auth Module integration was missing EPSS 0.5%CVE-2024-0308MEDIUMInis Proxy.php server-side request forgeryEPSS 0.5%CVE-2026-59707CRITICALLocalAI - Server-Side Request Forgery via POST /models/applyEPSS 0.5%CVE-2026-85675HIGHOWL DocumentProcessingToolkit Server-Side Request Forgery via URL FetchingEPSS 0.5%CVE-2026-85699HIGHjina-ai reader server-side request forgery via redirect validation bypassEPSS 0.5%CVE-2026-92719HIGHQuickwit through 0.9.0 SSRF via SQS queue_url ParameterEPSS 0.5%CVE-2026-48128MEDIUMBudibase: SSRF via User-Controlled queryId in Automation Execute Query StepEPSS 0.5%CVE-2026-82270HIGHPortkey AI Gateway Server-Side Request Forgery via /v1/proxy/*EPSS 0.5%CVE-2026-72606HIGHPinry Pinry - Server-Side Request ForgeryEPSS 0.5%CVE-2022-46830MEDIUMIn JetBrains TeamCity between 2022.10 and 2022.10.1 a custom STS endpoint allowed internal port scanning.EPSS 0.5%CVE-2026-30858MEDIUMWeKnora: DNS Rebinding Vulnerability in web_fetch Tool Allows SSRF to Internal ResourcesEPSS 0.5%CVE-2026-32949HIGHSQLBot: SSRF to Arbitrary File Read (AFR) via Rogue MySQLEPSS 0.5%CVE-2025-68437MEDIUMCraft CMS vulnerable to Server-Side Request Forgery (SSRF) via GraphQL Asset Upload MutationEPSS 0.5%CVE-2026-56285HIGHNitter - Server-Side Request Forgery in /video Media Proxy EndpointEPSS 0.5%CVE-2026-54729HIGHdssrf: any users using 1.1.1.1 DNS is impacted by SSRFEPSS 0.5%