Falhas do tipo CWE-918

3.033 resultados

Falsificação de Solicitação do Lado do Servidor (SSRF)

O servidor web recebe uma URL de um cliente e a recupera sem validar adequadamente o destino, permitindo que um atacante redirecione requisições para hosts internos, serviços privados ou IPs arbitrários. O risco é grave: exposição de dados internos, acesso a serviços administrativos, varredura de rede interna e até execução de código em sistemas conectados.

Exemplo

Uma aplicação oferece um recurso de 'baixar imagem de URL': o usuário envia `https://attacker.com/fetch?url=http://localhost:8080/admin`, e o servidor, sem validar, faz a requisição e retorna o conteúdo da página admin interna ou de um banco de dados local exposto.

Como mitigar

Valide e liste explicitamente domínios/IPs permitidos (whitelist), bloqueie ranges de IPs privados (10.0.0.0/8, 127.0.0.0/8, 169.254.0.0/16, 172.16.0.0/12, 192.168.0.0/16), use esquemas de URL permitidos (apenas http/https) e desabilite redirects automáticos ou validar o destino final. Considere usar um proxy ou gateway isolado para requisições externas.

CVE-2024-29736HIGHApache CXF: SSRF vulnerability via WADL stylesheet parameterEPSS 1.0%CVE-2021-34808MEDIUMServer-Side Request Forgery (SSRF) vulnerability in cgi component in Synology Media Server before 1.8.3-2881 allows remote attackers to acceEPSS 1.0%CVE-2021-36327MEDIUMDell EMC Streaming Data Platform versions before 1.3 contain a Server Side Request Forgery Vulnerability. A remote unauthenticated attacker EPSS 1.0%CVE-2022-24862HIGHServer-Side Request Forgery in DatabasirEPSS 1.0%CVE-2021-33926HIGHAn issue in Plone CMS v. 5.2.4, 5.2.3, 5.2.2, 5.2.1, 5.2.0, 5.1rc2, 5.1rc1, 5.1b4, 5.1b3, 5.1b2, 5.1a2, 5.1a1, 5.1.7, 5.1.6, 5.1.5, 5.1.4, 5EPSS 1.0%CVE-2021-24371—RSVPMaker < 8.7.3 - Authenticated (admin+) SSRFEPSS 1.0%CVE-2024-22203CRITICALWhoogle Search Server Side Request Forgery vulnerabilityEPSS 1.0%CVE-2022-23071—Recipes - SSRF on ImportEPSS 1.0%CVE-2023-48910CRITICALMicrocks up to 1.17.1 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /jobs and /artifact/download. This vuEPSS 1.0%CVE-2021-33184HIGHServer-Side request forgery (SSRF) vulnerability in task management component in Synology Download Station before 3.8.15-3563 allows remote EPSS 1.0%CVE-2023-23169MEDIUMSynapsoft pdfocus 1.17 is vulnerable to local file inclusion and server-side request forgery Directory Traversal.EPSS 1.0%CVE-2022-40700HIGHServer Side Request Forgery (SSRF) vulnerability affecting multiple WordPress pluginsEPSS 1.0%CVE-2022-0085LOWServer-Side Request Forgery (SSRF) in dompdf/dompdfEPSS 1.0%CVE-2026-21512MEDIUMAzure DevOps Server Cross-Site Scripting VulnerabilityEPSS 1.0%CVE-2021-22726—A CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EPSS 1.0%CVE-2022-0528MEDIUMServer-Side Request Forgery (SSRF) in transloadit/uppyEPSS 1.0%CVE-2024-27347MEDIUMApache HugeGraph-Hubble: SSRF in Hubble connection pageEPSS 1.0%CVE-2024-22205CRITICALWhoogle Search Server Side Request Forgery vulnerabilityEPSS 1.0%CVE-2019-6837—A Server-Side Request Forgery (SSRF): CWE-918 vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.EPSS 1.0%CVE-2024-51980MEDIUMUnauthenticated Server Side Request Forgery (SSRF) via WS-Addressing affecting multiple models from Brother Industries, Ltd, FUJIFILM Business Innovation, Ricoh, Toshiba Tec, and Konica Minolta, Inc.EPSS 1.0%