Falhas do tipo CWE-918

3.033 resultados

Falsificação de Solicitação do Lado do Servidor (SSRF)

O servidor web recebe uma URL de um cliente e a recupera sem validar adequadamente o destino, permitindo que um atacante redirecione requisições para hosts internos, serviços privados ou IPs arbitrários. O risco é grave: exposição de dados internos, acesso a serviços administrativos, varredura de rede interna e até execução de código em sistemas conectados.

Exemplo

Uma aplicação oferece um recurso de 'baixar imagem de URL': o usuário envia `https://attacker.com/fetch?url=http://localhost:8080/admin`, e o servidor, sem validar, faz a requisição e retorna o conteúdo da página admin interna ou de um banco de dados local exposto.

Como mitigar

Valide e liste explicitamente domínios/IPs permitidos (whitelist), bloqueie ranges de IPs privados (10.0.0.0/8, 127.0.0.0/8, 169.254.0.0/16, 172.16.0.0/12, 192.168.0.0/16), use esquemas de URL permitidos (apenas http/https) e desabilite redirects automáticos ou validar o destino final. Considere usar um proxy ou gateway isolado para requisições externas.

CVE-2021-25972MEDIUMCamaleon CMS - Server-Side Request Forgery (SSRF) in Media Upload FeatureEPSS 1.0%CVE-2022-0767CRITICALServer-Side Request Forgery (SSRF) in janeczku/calibre-webEPSS 1.0%CVE-2023-50731CRITICALMindsDB has arbitrary file write in file.pyEPSS 1.0%CVE-2023-25195HIGHApache Fineract: SSRF template type vulnerability in certain authenticated usersEPSS 1.0%CVE-2024-0759HIGHCollection of internally resolving IPsEPSS 1.0%CVE-2021-33181MEDIUMServer-Side Request Forgery (SSRF) vulnerability in webapi component in Synology Video Station before 2.4.10-1632 allows remote authenticateEPSS 1.0%CVE-2025-6087HIGHSSRF vulnerability in opennextjs-cloudflare via /_next/image endpointEPSS 1.0%CVE-2022-36376MEDIUMWordPress Rank Math SEO plugin <= 1.0.95 - Server-Side Request Forgery (SSRF) vulnerabilityEPSS 1.0%CVE-2023-41055HIGHLibreY Server-Side Request Forgery (SSRF) vulnerability via wikipedia_language cookieEPSS 1.0%CVE-2023-27161HIGHJellyfin up to v10.7.7 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /Repositories. This vulnerability alEPSS 1.0%CVE-2023-42439HIGHGeoNode SSRF Bypass to return internal host dataEPSS 1.0%CVE-2025-34350HIGHUnForm Server < 10.1.15 Doc Flow Unauthenticated File ReadEPSS 1.0%CVE-2022-0339MEDIUMServer-Side Request Forgery (SSRF) in janeczku/calibre-webEPSS 1.0%CVE-2023-26492MEDIUMDirectus vulnerable to Server-Side Request Forgery On File ImportEPSS 1.0%CVE-2026-26118HIGHAzure MCP Server Tools Elevation of Privilege VulnerabilityEPSS 1.0%CVE-2023-25504MEDIUMApache Superset: Possible SSRF on import datasetsEPSS 1.0%CVE-2022-1191HIGHSSRF on index.php/cobrowse/proxycss/ in livehelperchat/livehelperchatEPSS 1.0%CVE-2022-39211LOWServer-Side Request Forgery (SSRF) via potential filter bypass in Nextcloud ServerEPSS 1.0%CVE-2023-29292MEDIUMServer Side Request Forgery (SSRF) in FedEx carrier integration configurationEPSS 1.0%CVE-2024-51358CRITICALAn issue in Linux Server Heimdall v.2.6.1 allows a remote attacker to execute arbitrary code via a crafted script to the Add new applicationEPSS 1.0%