CWE-441: Unintended Proxy or Intermediary (Confused Deputy), page 5

The product receives a request, message, or directive from an upstream component, but the product does not sufficiently preserve the original source of the request before forwarding the request to an external actor that is outside of the product's control sphere.

What the weakness is: CWE-441 at MITRE

1. 5.5CVE-2022-39349EPSS 0.3%2022-10-25

   The Tasks.org Android app is an open-source app for to-do lists and reminders. The Tasks.org app uses the activity `ShareLinkActivity.kt` to handle "share" intents coming from other components in the same device and convert them to tasks. …

2. 4.3CVE-2015-10003EPSS 0.6%2022-07-17

   A vulnerability, which was classified as problematic, was found in FileZilla Server up to 0.9.50. This affects an unknown part of the component PORT Handler. The manipulation leads to unintended intermediary. It is possible to initiate the…

3. 9.8CVE-2021-20042EPSS 3.7%2021-12-08

   An unauthenticated remote attacker can use SMA 100 as an unintended proxy or intermediary undetectable proxy to bypass firewall rules. This vulnerability affected SMA 200, 210, 400, 410 and 500v appliances.

4. 3.1CVE-2021-25740EPSS 2.0%2021-09-20

   A security issue was discovered with Kubernetes that could enable users to send network traffic to locations they would otherwise not have access to via a confused deputy attack.

5. 4.1CVE-2020-8561EPSS 2.1%2021-09-20

   A security issue was discovered in Kubernetes where actors that control the responses of MutatingWebhookConfiguration or ValidatingWebhookConfiguration requests are able to redirect kube-apiserver requests to private networks of the apiser…

6. 8.5CVE-2021-32783EPSS 1.2%2021-07-23

   Contour is a Kubernetes ingress controller using Envoy proxy. In Contour before version 1.17.1 a specially crafted ExternalName type Service may be used to access Envoy's admin interface, which Contour normally prevents from access outside…

7. 7.5CVE-2021-32773EPSS 0.9%2021-07-20

   Racket is a general-purpose programming language and an ecosystem for language-oriented programming. In versions prior to 8.2, code evaluated using the Racket sandbox could cause system modules to incorrectly use attacker-created modules i…

8. 7.2CVE-2020-26262EPSS 1.5%2021-01-13

   Coturn is free open source implementation of TURN and STUN Server. Coturn before version 4.5.2 by default does not allow peers to connect and relay packets to loopback addresses in the range of `127.x.x.x`. However, it was observed that wh…

9. 6.5CVE-2020-5412ExploitEPSS 10%2020-08-07

   Spring Cloud Netflix, versions 2.2.x prior to 2.2.4, versions 2.1.x prior to 2.1.6, and older unsupported versions allow applications to use the Hystrix Dashboard proxy.stream endpoint to make requests to any server reachable by the server…

10. 6.5CVE-2019-3996EPSS 6.6%2019-12-17

    ELOG 3.1.4-57bea22 and below can be used as an HTTP GET request proxy when unauthenticated remote attackers send crafted HTTP POST requests.

11. 8.1CVE-2019-1841EPSS 2.6%2019-04-18

    A vulnerability in the Software Image Management feature of Cisco DNA Center could allow an authenticated, remote attacker to access to internal services without additional authentication. The vulnerability is due to insufficient validatio…

12. 6.7CVE-2018-12182EPSS 0.4%2019-03-27

    Insufficient memory write check in SMM service for EDK II may allow an authenticated user to potentially enable escalation of privilege, information disclosure and/or denial of service via local access.

13. 7.5CVE-2019-3924ExploitEPSS 16%2019-02-20

    MikroTik RouterOS before 6.43.12 (stable) and 6.42.12 (long-term) is vulnerable to an intermediary vulnerability. The software will execute user defined network requests to both WAN and LAN clients. A remote unauthenticated attacker can us…

14. 5.9CVE-2018-16598EPSS 1.5%2018-12-06

    An issue was discovered in Amazon Web Services (AWS) FreeRTOS through 1.3.1, FreeRTOS up to V10.0.1 (with FreeRTOS+TCP), and WITTENSTEIN WHIS Connect middleware TCP/IP component. In xProcessReceivedUDPPacket and prvParseDNSReply, any recei…

15. 4.2CVE-2018-1999038EPSS 0.5%2018-08-01

    A confused deputy vulnerability exists in Jenkins Publisher Over CIFS Plugin 0.10 and earlier in CifsPublisherPluginDescriptor.java that allows attackers to have Jenkins connect to an attacker specified CIFS server with attacker specified …

16. 9.1CVE-2015-2947EPSS 1.5%2017-04-13

    KanColleViewer versions 3.8.1 and earlier operates as an open proxy which allows remote attackers to trigger outbound network traffic.