Falhas do tipo CWE-918

3.578 resultados

Falsificação de Solicitação do Lado do Servidor (SSRF)

O servidor web recebe uma URL de um cliente e a recupera sem validar adequadamente o destino, permitindo que um atacante redirecione requisições para hosts internos, serviços privados ou IPs arbitrários. O risco é grave: exposição de dados internos, acesso a serviços administrativos, varredura de rede interna e até execução de código em sistemas conectados.

Exemplo

Uma aplicação oferece um recurso de 'baixar imagem de URL': o usuário envia `https://attacker.com/fetch?url=http://localhost:8080/admin`, e o servidor, sem validar, faz a requisição e retorna o conteúdo da página admin interna ou de um banco de dados local exposto.

Como mitigar

Valide e liste explicitamente domínios/IPs permitidos (whitelist), bloqueie ranges de IPs privados (10.0.0.0/8, 127.0.0.0/8, 169.254.0.0/16, 172.16.0.0/12, 192.168.0.0/16), use esquemas de URL permitidos (apenas http/https) e desabilite redirects automáticos ou validar o destino final. Considere usar um proxy ou gateway isolado para requisições externas.

CVE-2026-65941CRITICALWhatsUp Gold versions prior to 26.0.2 contain an unauthenticated remote code execution vulnerability in an internal report scheduling service.EPSS 0.7%CVE-2026-115886MEDIUMMLflow: SSRF on unauthenticated MLflow servers via third-party scorer kwargs in the scorer invoke, register, and GenAI evaluate endpointsEPSS 0.7%CVE-2025-34469MEDIUMCowrie < 2.9.0 Unrestricted wget/curl Emulation Enables SSRF-Based DDoS AmplificationEPSS 0.7%CVE-2024-33250HIGHAn issue in Open-Source Technology Committee SRS real-time video server RS/4.0.268(Leo) and SRS/4.0.195(Leo) allows a remote attacker to exeEPSS 0.7%CVE-2025-25297HIGHLabel Studio allows Server-Side Request Forgery in the S3 Storage EndpointEPSS 0.7%CVE-2024-31461CRITICALPlane Server-Side Request Forgery (SSRF) VulnerabilityEPSS 0.7%CVE-2025-1521HIGHPostHog slack_incoming_webhook Server-Side Request Forgery Information Disclosure VulnerabilityEPSS 0.7%CVE-2024-11030HIGHSSRF in binary-husky/gpt_academicEPSS 0.7%CVE-2024-40441MEDIUMAn issue in Doccano Open source annotation tools for machine learning practitioners v.1.8.4 and Doccano Auto Labeling Pipeline module to annEPSS 0.7%CVE-2024-11031HIGHSSRF in binary-husky/gpt_academicEPSS 0.7%CVE-2026-40564MEDIUMApache Flink Kubernetes Operator: Server-Side Request Forgery and local file access in Kubernetes OperatorEPSS 0.7%CVE-2026-82757MEDIUMash_authentication_oauth2_server CIMD fetcher classifies IPv4-in-IPv6 and site-local addresses as public, allowing SSRFEPSS 0.7%CVE-2026-63643MEDIUMMagicMirror: ssrf calendar .jsEPSS 0.7%CVE-2026-86321MEDIUMjava-json-tools jackson-coreutils URL Validation JsonLoader.java JsonLoader.fromURL server-side request forgeryEPSS 0.7%CVE-2024-56736MEDIUMApache HertzBeat: Server-Side Request Forgery (SSRF) in Api Config OssEPSS 0.7%CVE-2026-89049HIGHServer-side request forgery in the Session Manager port forwarding functionality in AWS Systems Manager AgentEPSS 0.7%CVE-2022-47635CRITICALWildix WMS 6 before 6.02.20221216, WMS 5 before 5.04.20221214, and WMS4 before 4.04.45396.23 allows Server-side request forgery (SSRF) via ZEPSS 0.7%CVE-2024-12775MEDIUMSSRF in langgenius/difyEPSS 0.7%CVE-2024-27565CRITICALA Server-Side Request Forgery (SSRF) in weixin.php of ChatGPT-wechat-personal commit a0857f6 allows attackers to force the application to maEPSS 0.7%CVE-2024-12779MEDIUMSSRF in infiniflow/ragflowEPSS 0.7%