cve.bz

CWE-918: Server-Side Request Forgery (SSRF), page 70

Filter

The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

What the weakness is: CWE-918 at MITRE

Ask an AI about CWE-918

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-918: Server-Side Request Forgery and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/918.html and https://cve.bz/cve/cwe/918?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 7.3CVE-2022-22339EPSS 0.6%

    IBM Planning Analytics 2.0 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attack…

  2. 8.8CVE-2021-36202EPSS 0.8%

    Server-Side Request Forgery (SSRF) vulnerability in Johnson Controls Metasys could allow an authenticated attacker to inject malicious code into the MUI PDF export feature. This issue affects: Johnson Controls Metasys All 10 versions versi…

  3. 6.5CVE-2020-27375EPSS 0.6%

    Dr Trust USA iCheck Connect BP Monitor BP Testing 118 version 1.2.1 is vulnerable to Transmitting Write Requests and Chars.

  4. 8.1CVE-2022-1213EPSS 0.6%

    SSRF filter bypass port 80, 433 in GitHub repository livehelperchat/livehelperchat prior to 3.67v. An attacker could make the application perform arbitrary requests, bypass CVE-2022-1191

  5. 5.3CVE-2022-1188EPSS 1.4%

    An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.1 before 14.7.7, all versions starting from 14.8 before 14.8.5, all versions starting from 14.9 before 14.9.2 where a blind SSRF attack through the reposi…

  6. 9.1CVE-2022-0990EPSS 1.3%

    Server-Side Request Forgery (SSRF) in GitHub repository janeczku/calibre-web prior to 0.6.18.

  7. 9.9CVE-2022-0939EPSS 1.1%

    Server-Side Request Forgery (SSRF) in GitHub repository janeczku/calibre-web prior to 0.6.18.

  8. 7.6CVE-2022-0425EPSS 0.6%

    A DNS rebinding vulnerability in the Irker IRC Gateway integration in all versions of GitLab CE/EE since version 7.9 allows an attacker to trigger Server Side Request Forgery (SSRF) attacks.

  9. 8.1CVE-2022-1191EPSS 1.0%

    SSRF on index.php/cobrowse/proxycss/ in GitHub repository livehelperchat/livehelperchat prior to 3.96.

  10. 7.2CVE-2021-33581EPSS 1.3%

    MashZone NextGen through 10.7 GA has an SSRF vulnerability that allows an attacker to interact with arbitrary TCP services, by abusing the feature to check the availability of a PPM connection. This occurs in com.idsscheer.ppmmashup.web.we…

  11. 4.3CVE-2022-27907EPSS 0.7%

    Sonatype Nexus Repository Manager 3.x before 3.38.0 allows SSRF.

  12. 7.6CVE-2022-24789EPSS 0.8%

    C1 CMS is an open-source, .NET based Content Management System (CMS). Versions prior to 6.12 allow an authenticated user to exploit Server Side Request Forgery (SSRF) by causing the server to make arbitrary GET requests to other servers in…

  13. 9.1CVE-2022-0249EPSS 1.3%

    A vulnerability was discovered in GitLab starting with version 12. GitLab was vulnerable to a blind SSRF attack since requests to shared address space were not blocked.

  14. 8.1CVE-2022-0136EPSS 1.0%

    A vulnerability was discovered in GitLab versions 10.5 to 14.5.4, 14.6 to 14.6.4, and 14.7 to 14.7.1. GitLab was vulnerable to a blind SSRF attack through the Project Import feature.

  15. 7.5CVE-2021-44139ExploitEPSS 5.6%

    Sentinel 1.8.2 is vulnerable to Server-side request forgery (SSRF).

  16. 9.1CVE-2022-0591ExploitEPSS 20%

    The FormCraft WordPress plugin before 3.8.28 does not validate the URL parameter in the formcraft3_get AJAX action, leading to SSRF issues exploitable by unauthenticated users

  17. 8.8CVE-2022-27245EPSS 0.9%

    An issue was discovered in MISP before 2.4.156. app/Model/Server.php does not restrict generateServerSettings to the CLI. This could lead to SSRF.

  18. 7.5CVE-2021-45968ExploitEPSS 10%

    An issue was discovered in xmppserver jar in the XMPP Server component of the JIve platform, as used in Pascom Cloud Phone System before 7.20.x (and in other products). An endpoint in the backend Tomcat server of the Pascom allows SSRF, a …

  19. 7.5CVE-2021-46107ExploitEPSS 6.6%

    Ligeo Archives Ligeo Basics as of 02_01-2022 is vulnerable to Server Side Request Forgery (SSRF) which allows an attacker to read any documents via the download features.

  20. 7.5CVE-2021-45851EPSS 1.5%

    A Server-Side Request Forgery (SSRF) attack in FUXA 1.1.3 can be carried out leading to the obtaining of sensitive information from the server's internal environment and services, often potentially leading to the attacker executing command…

  21. 6.5CVE-2021-39051EPSS 0.9%

    IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.14.3 is vulnerable to server-side request forgery, caused by improper input of application server registration function. A remote attacker could exploit this vulnerability using the hos…

  22. 4.3CVE-2021-43954EPSS 0.8%

    The DefaultRepositoryAdminService class in Fisheye and Crucible before version 4.8.9 allowed remote attackers, who have 'can add repository permission', to enumerate the existence of internal network and filesystem resources via a Server-S…

  23. 5.3CVE-2022-0870ExploitEPSS 3.4%

    Server-Side Request Forgery (SSRF) in GitHub repository gogs/gogs prior to 0.12.5.

  24. 4.3CVE-2018-25031EPSS 42%

    Swagger UI 4.1.2 and earlier could allow a remote attacker to conduct spoofing attacks. By persuading a victim to open a crafted URL, an attacker could exploit this vulnerability to display remote OpenAPI definitions. Note: This was origin…

  25. 6.1CVE-2022-24739EPSS 0.9%

    alltube is an html front end for youtube-dl. On releases prior to 3.0.3, an attacker could craft a special HTML page to trigger either an open redirect attack or a Server-Side Request Forgery attack (depending on how AllTube is configured)…

  26. 9.9CVE-2022-0767EPSS 1.0%

    Server-Side Request Forgery (SSRF) in GitHub repository janeczku/calibre-web prior to 0.6.17.

  27. 9.8CVE-2022-0766EPSS 1.3%

    Server-Side Request Forgery (SSRF) in GitHub repository janeczku/calibre-web prior to 0.6.17.

  28. 7.5CVE-2022-0528EPSS 1.0%

    Server-Side Request Forgery (SSRF) in GitHub repository transloadit/uppy prior to 3.3.1.

  29. 9.1CVE-2022-0768EPSS 1.6%

    Server-Side Request Forgery (SSRF) in GitHub repository rudloff/alltube prior to 3.0.2.

  30. 9.1CVE-2022-25260EPSS 2.4%

    JetBrains Hub before 2021.1.14276 was vulnerable to blind Server-Side Request Forgery (SSRF).

  31. 6.5CVE-2022-24333EPSS 0.7%

    In JetBrains TeamCity before 2021.2, blind SSRF via an XML-RPC call was possible.

  32. 7.5CVE-2022-24980EPSS 1.2%

    An issue was discovered in the Kitodo.Presentation (aka dif) extension before 2.3.2, 3.x before 3.2.3, and 3.3.x before 3.3.4 for TYPO3. A missing access check in an eID script allows an unauthenticated user to submit arbitrary URLs to thi…

  33. 9.8CVE-2022-21215EPSS 1.4%

    This vulnerability could allow an attacker to force the server to create and execute a web request granting access to backend APIs that are only accessible to the Mimosa MMP server, or request pages that could perform some actions themselv…

  34. 9.1CVE-2022-0671EPSS 1.3%

    A flaw was found in vscode-xml in versions prior to 0.19.0. Schema download could lead to blind SSRF or DoS via a large file.

  35. 9.8CVE-2021-20325EPSS 1.6%

    Missing fixes for CVE-2021-40438 and CVE-2021-26691 in the versions of httpd, as shipped in Red Hat Enterprise Linux 8.5.0, causes a security regression compared to the versions shipped in Red Hat Enterprise Linux 8.4. A user who installs …

  36. 8.8CVE-2022-23644EPSS 0.9%

    BookWyrm is a decentralized social network for tracking reading habits and reviewing books. The functionality to load a cover via url is vulnerable to a server-side request forgery attack. Any BookWyrm instance running a version prior to v…

  37. 9.8CVE-2022-24568EPSS 1.2%

    Novel-plus v3.6.0 was discovered to be vulnerable to Server-Side Request Forgery (SSRF) via user-supplied crafted input.

  38. 2.7CVE-2021-25939EPSS 1.1%

    In ArangoDB, versions v3.7.0 through v3.9.0-alpha.1 have a feature which allows downloading a Foxx service from a publicly available URL. This feature does not enforce proper filtering of requests performed internally, which can be abused …

  39. 7.5CVE-2021-45325EPSS 1.0%

    Server Side Request Forgery (SSRF) vulneraility exists in Gitea before 1.7.0 using the OpenID URL.

  40. 5.3CVE-2022-0508EPSS 0.9%

    Server-Side Request Forgery (SSRF) in GitHub repository chocobozzz/peertube prior to f33e515991a32885622b217bf2ed1d1b0d9d6832

  41. 7.5CVE-2022-23206EPSS 2.0%

    In Apache Traffic Control Traffic Ops prior to 6.1.0 or 5.1.6, an unprivileged user who can reach Traffic Ops over HTTPS can send a specially-crafted POST request to /user/login/oauth to scan a port of a server that Traffic Ops can reach.

  42. 8.2CVE-2022-24129ExploitEPSS 6.1%

    The OIDC OP plugin before 3.0.4 for Shibboleth Identity Provider allows server-side request forgery (SSRF) due to insufficient restriction of the request_uri parameter. This allows attackers to interact with arbitrary third-party HTTP serv…

  43. 9.8CVE-2021-42637EPSS 2.2%

    PrinterLogic Web Stack versions 19.1.1.13 SP9 and below use user-controlled input to craft a URL, resulting in a Server Side Request Forgery (SSRF) vulnerability.

  44. 9.8CVE-2022-0339EPSS 1.0%

    Server-Side Request Forgery (SSRF) in Pypi calibreweb prior to 0.6.16.

  45. 8.8CVE-2022-22993EPSS 0.8%

    A limited SSRF vulnerability was discovered on Western Digital My Cloud devices that could allow an attacker to impersonate a server and reach any page on the server by bypassing access controls. The vulnerability was addressed by creating…

  46. 8.6CVE-2021-22821EPSS 0.8%

    A CWE-918 Server-Side Request Forgery (SSRF) vulnerability exists that could cause the station web server to forward requests to unintended network targets when crafted malicious parameters are submitted to the charging station web server.…

  47. 7.1CVE-2022-21697EPSS 1.1%

    Jupyter Server Proxy is a Jupyter notebook server extension to proxy web services. Versions of Jupyter Server Proxy prior to 3.2.1 are vulnerable to Server-Side Request Forgery (SSRF). Any user deploying Jupyter Server or Notebook with jup…

  48. 4.3CVE-2021-36349EPSS 0.6%

    Dell EMC Data Protection Central versions 19.5 and prior contain a Server Side Request Forgery vulnerability in the DPC DNS client processing. A remote malicious user could potentially exploit this vulnerability, allowing port scanning of …

  49. 7.5CVE-2021-23664EPSS 1.4%

    The package @isomorphic-git/cors-proxy before 2.7.1 are vulnerable to Server-side Request Forgery (SSRF) due to missing sanitization and validation of the redirection action in middleware.js.

  50. 4.3CVE-2021-41809EPSS 0.6%

    SSRF vulnerability in M-Files Server products with versions before 22.1.11017.1, in a preview function allowed making queries from the server with certain document types referencing external entities.