Falhas do tipo CWE-918

3.037 resultados

Falsificação de Solicitação do Lado do Servidor (SSRF)

O servidor web recebe uma URL de um cliente e a recupera sem validar adequadamente o destino, permitindo que um atacante redirecione requisições para hosts internos, serviços privados ou IPs arbitrários. O risco é grave: exposição de dados internos, acesso a serviços administrativos, varredura de rede interna e até execução de código em sistemas conectados.

Exemplo

Uma aplicação oferece um recurso de 'baixar imagem de URL': o usuário envia `https://attacker.com/fetch?url=http://localhost:8080/admin`, e o servidor, sem validar, faz a requisição e retorna o conteúdo da página admin interna ou de um banco de dados local exposto.

Como mitigar

Valide e liste explicitamente domínios/IPs permitidos (whitelist), bloqueie ranges de IPs privados (10.0.0.0/8, 127.0.0.0/8, 169.254.0.0/16, 172.16.0.0/12, 192.168.0.0/16), use esquemas de URL permitidos (apenas http/https) e desabilite redirects automáticos ou validar o destino final. Considere usar um proxy ou gateway isolado para requisições externas.

CVE-2026-40242HIGHArcane Unauthenticated SSRF with Conditional Response Reflection in Template Fetch EndpointEPSS 0.6%CVE-2024-0946HIGH60IndexPage Parameter index.php server-side request forgeryEPSS 0.6%CVE-2025-37090MEDIUMA server-side request forgery vulnerability exists in HPE StoreOnce Software.EPSS 0.6%CVE-2022-37938CRITICALUnauthenticated server side request forgery in HPE Serviceguard ManagerEPSS 0.6%CVE-2022-47635CRITICALWildix WMS 6 before 6.02.20221216, WMS 5 before 5.04.20221214, and WMS4 before 4.04.45396.23 allows Server-side request forgery (SSRF) via ZEPSS 0.6%CVE-2024-0945HIGH60IndexPage Parameter file.php server-side request forgeryEPSS 0.6%CVE-2025-3954MEDIUMChurchCRM Referer server-side request forgeryEPSS 0.6%CVE-2024-48944MEDIUMApache Kylin: SSRF vulnerability in the diagnosis apiEPSS 0.6%CVE-2026-35037HIGHEch0 affected by unauthenticated SSRF in GetWebsiteTitle allows access to internal services and cloud metadataEPSS 0.6%CVE-2022-42894HIGHA vulnerability has been identified in syngo Dynamics (All versions < VA40G HF01). An unauthenticated Server-Side Request Forgery (SSRF) vulEPSS 0.6%CVE-2022-36451HIGHA vulnerability in the MiCollab Client server component of Mitel MiCollab through 9.5.0.101 could allow an authenticated attacker to conductEPSS 0.6%CVE-2024-44721CRITICALSeaCMS v13.1 was discovered to a Server-Side Request Forgery (SSRF) via the url parameter at /admin_reslib.php.EPSS 0.6%CVE-2024-22648MEDIUMA Blind SSRF vulnerability exists in the "Crawl Meta Data" functionality of SEO Panel version 4.10.0. This makes it possible for remote attaEPSS 0.6%CVE-2023-34959MEDIUMAn issue in Chamilo v1.11.* up to v1.11.18 allows attackers to execute a Server-Side Request Forgery (SSRF) and obtain information on the seEPSS 0.6%CVE-2023-47619HIGHAudiobookshelf Server-Side Request Forgery and Arbitrary File Read VulnerabilityEPSS 0.6%CVE-2023-1895HIGHGetwid – Gutenberg Blocks <= 1.8.3 - Authenticated(Subscriber+) Server Side Request ForgeryEPSS 0.6%CVE-2026-15330MEDIUMzhayujie CowAgent Vision Tool vision.py _download_to_data_url server-side request forgeryEPSS 0.6%CVE-2023-6570HIGHServer-Side Request Forgery (SSRF) in kubeflow/kubeflowEPSS 0.6%CVE-2025-34021HIGHSelea Targa IP OCR-ANPR Camera Server-Side Request ForgeryEPSS 0.6%CVE-2026-15927MEDIUMQuay: mirror-registry: ssrf: repo-level mirror accepts external_reference without url validationEPSS 0.6%