Fallos del tipo CWE-918

3088 resultados

Server-Side Request Forgery (SSRF)

Ocorre quando a aplicação web busca conteúdo de uma URL fornecida pelo usuário sem validar adequadamente o destino. Um atacante consegue fazer o servidor requisitar URLs não autorizadas — internas, administrativas ou de terceiros — aproveitando a confiança e as permissões que o servidor possui na rede.

Ejemplo

Um sistema permite gerar thumbnails de imagens externas: o usuário passa uma URL e o servidor faz o download. Um atacante envia 'http://localhost:8080/admin' e consegue acessar painéis administrativos internos que não deveria. Ou envia 'http://169.254.169.254/latest/meta-data' em ambientes AWS e rouba credenciais.

Cómo mitigar

Mantenha uma whitelist rigorosa de domínios e IPs permitidos; bloqueie ranges privados (10.0.0.0/8, 127.0.0.0/8, 169.254.0.0/16) e metadados-servers por padrão; valide URLs antes de fazer requisições; use bibliotecas de parsing robustas; considere isolamento de rede para requisições externas.

CVE-2025-29455MEDIUMAn issue in personal-management-system Personal Management System 1.4.65 allows a remote attacker to obtain sensitive information via the TrEPSS 0.4%CVE-2026-57126HIGHpraisonaiagents: SSRF guard validates literal IPs only and never resolves DNSEPSS 0.4%CVE-2025-29454MEDIUMAn issue in personal-management-system Personal Management System 1.4.65 allows a remote attacker to obtain sensitive information via the UpEPSS 0.4%CVE-2026-28451MEDIUMOpenClaw < 2026.2.14 - SSRF via Feishu Extension Media FetchingEPSS 0.4%CVE-2025-9960MEDIUMis-localhost-ip 2.0.0 - SSRF via Restrictions bypassEPSS 0.4%CVE-2025-29449MEDIUMAn issue in twonav v.2.1.18-20241105 allows a remote attacker to obtain sensitive information via the link identification function.EPSS 0.4%CVE-2025-29453MEDIUMAn issue in personal-management-system Personal Management System 1.4.65 allows a remote attacker to obtain sensitive information via the myEPSS 0.4%CVE-2025-29450MEDIUMAn issue in twonav v.2.1.18-20241105 allows a remote attacker to obtain sensitive information via the site settings component.EPSS 0.4%CVE-2025-62615CRITICALAutoGPT has SSRF vulnerability in ReadRSSFeedBlockEPSS 0.4%CVE-2025-29456MEDIUMAn issue in personal-management-system Personal Management System 1.4.65 allows a remote attacker to obtain sensitive information via the crEPSS 0.4%CVE-2026-25493MEDIUMCraft has a SSRF in GraphQL Asset Mutation via HTTP RedirectEPSS 0.4%CVE-2026-6616MEDIUMTransformerOptimus SuperAGI WebScraperTool webpage_extractor.py extract_with_lxml server-side request forgeryEPSS 0.4%CVE-2026-18775MEDIUMNousResearch hermes-agent Browser Tooling browser_tool.py browser_snapshot server-side request forgeryEPSS 0.4%CVE-2023-25609MEDIUMA server-side request forgery (SSRF) vulnerability [CWE-918] in FortiManager and FortiAnalyzer GUI 7.2.0 through 7.2.1, 7.0.0 through 7.0.6,EPSS 0.4%CVE-2023-7325CRITICALMingyu Operations and Maintenance Audit and Risk Control System xmlrpc.sock SSRFEPSS 0.4%CVE-2026-35409HIGHDirectus has a SSRF Protection Bypass via IPv4-Mapped IPv6 Addresses in File ImportEPSS 0.4%CVE-2026-88001MEDIUMOpen WebUI: Server-side fetches reach blocked and internal hosts via unvalidated HTTP redirect targetsEPSS 0.4%CVE-2023-3577LOWLimited blind SSRF to localhost/intranet in interactive dialog implementationEPSS 0.4%CVE-2026-82905MEDIUMsdcb chats fetch-tools Endpoint McpController.cs McpController server-side request forgeryEPSS 0.4%CVE-2024-4562MEDIUMWhatsUp Gold Server-Side Request Forgery Information Disclosure Vulnerability via HttpMonitorSettingsEPSS 0.4%