CWE-918— Server-Side Request Forgery (SSRF)

The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.— MITRE CWE catalog

4,095 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →

CVEs classified under CWE-918page 5 of 82

CVE-2024-0304CRITICALCVSS 9.8EG 9.8
2024-01-08
A vulnerability has been found in Youke365 up to 1.5.3 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /app/api/controller/collect.php. The manipulation of the argument url leads to server…
CVE-2024-0303CRITICALCVSS 9.8EG 9.8
2024-01-08
A vulnerability, which was classified as critical, was found in Youke365 up to 1.5.3. Affected is an unknown function of the file /app/api/controller/caiji.php of the component Parameter Handler. The manipulation of the argument url leads …
CVE-2023-51467CRITICALCVSS 9.8EG 9.8
2023-12-26
The vulnerability permits attackers to circumvent authentication processes, enabling them to remotely execute arbitrary code
CVE-2023-6974CRITICALCVSS 9.8EG 9.8
2023-12-20
A malicious user could use this issue to access internal HTTP(s) servers and in the worst case (ie: aws instance) it could be abuse to get a remote code execution on the victim machine.
CVE-2023-6853CRITICALCVSS 9.8EG 9.8
2023-12-16
A vulnerability classified as critical was found in kalcaddle KodExplorer up to 4.51.03. Affected by this vulnerability is the function index of the file plugins/officeLive/app.php. The manipulation of the argument path leads to server-sid…
CVE-2023-6852CRITICALCVSS 9.8EG 9.8
2023-12-16
A vulnerability classified as critical has been found in kalcaddle KodExplorer up to 4.51.03. Affected is an unknown function of the file plugins/webodf/app.php. The manipulation leads to server-side request forgery. It is possible to laun…
CVE-2023-6849CRITICALCVSS 9.8EG 9.8
2023-12-16
A vulnerability was found in kalcaddle kodbox up to 1.48. It has been rated as critical. Affected by this issue is the function cover of the file plugins/fileThumb/app.php. The manipulation of the argument path leads to server-side request…
CVE-2023-40630CRITICALCVSS 9.8EG 9.8
2023-12-14
Unauthenticated LFI/SSRF in JCDashboards component for Joomla.
CVE-2023-48910CRITICALCVSS 9.8EG 9.8
2023-12-04
Microcks up to 1.17.1 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /jobs and /artifact/download. This vulnerability allows attackers to access network resources and sensitive information via a crafted GE…
CVE-2023-48022CRITICALCVSS 9.8EG 9.8
2023-11-28
Anyscale Ray 2.6.3 and 2.8.0 allows a remote attacker to execute arbitrary code via the job submission API. NOTE: the vendor's position is that this report is irrelevant because Ray, as stated in its documentation, is not intended for use …
CVE-2023-46480CRITICALCVSS 9.8EG 9.8
2023-11-27
An issue in OwnCast v.0.1.1 allows a remote attacker to execute arbitrary code and obtain sensitive information via the authHost parameter of the indieauth function.
CVE-2023-5974CRITICALCVSS 9.8EG 9.8
2023-11-27
The WPB Show Core WordPress plugin through 2.2 is vulnerable to server-side request forgery (SSRF) via the `path` parameter.
CVE-2023-48307CRITICALCVSS 9.8EG 9.8
2023-11-21
Nextcloud Mail is the mail app for Nextcloud, a self-hosted productivity platform. Starting in version 1.13.0 and prior to version 2.2.8 and 3.3.0, an attacker can use an unprotected endpoint in the Mail app to perform a SSRF attack. Nextc…
CVE-2023-48306CRITICALCVSS 9.8EG 9.8
2023-11-21
Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prior to versions 25.0.11, 26.0.6, and 27.1.0 of Nextcloud Server and starting in version 22.0.0 and prior to versions 22.2…
CVE-2023-47121CRITICALCVSS 9.8EG 9.8
2023-11-10
Discourse is an open source platform for community discussion. Prior to version 3.1.3 of the `stable` branch and version 3.2.0.beta3 of the `beta` and `tests-passed` branches, the embedding feature is susceptible to server side request for…
CVE-2023-43982CRITICALCVSS 9.8EG 9.8
2023-11-03
Bon Presta boninstagramcarousel between v5.2.1 to v7.0.0 was discovered to contain a Server-Side Request Forgery (SSRF) via the url parameter at insta_parser.php. This vulnerability allows attackers to use the vulnerable website as proxy t…
CVE-2023-46502CRITICALCVSS 9.8EG 9.8
2023-10-30
An issue in openCRX v.5.2.2 allows a remote attacker to read internal files and execute server side request forgery attack via insecure DocumentBuilderFactory.
CVE-2023-43795CRITICALCVSS 9.8EG 9.8
2023-10-25
GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. The OGC Web Processing Service (WPS) specification is designed to process information from any server using GET and POST reque…
CVE-2023-43654CRITICALCVSS 9.8EG 9.8
2023-09-28
TorchServe is a tool for serving and scaling PyTorch models in production. TorchServe default configuration lacks proper input validation, enabling third parties to invoke remote HTTP download requests and write files to the disk. This iss…
CVE-2023-41449CRITICALCVSS 9.8EG 9.8
2023-09-27
An issue in phpkobo AjaxNewsTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the reque parameter.
CVE-2023-42398CRITICALCVSS 9.8EG 9.8
2023-09-15
An issue in zzCMS v.2023 allows a remote attacker to execute arbitrary code and obtain sensitive information via the ueditor component in controller.php.
CVE-2023-35175CRITICALCVSS 9.8EG 9.8
2023-06-30
Certain HP LaserJet Pro print products are potentially vulnerable to Potential Remote Code Execution and/or Elevation of Privilege via Server-Side Request Forgery (SSRF) using the Web Service Eventing model.
CVE-2018-17452CRITICALCVSS 9.8EG 9.8
2023-04-15
An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1. There is Server-Side Request Forgery (SSRF) via a loopback address to the validate_localhost function in url_…
CVE-2023-1725CRITICALCVSS 9.8EG 9.8
2023-03-30
Server-Side Request Forgery (SSRF) vulnerability in Infoline Project Management System allows Server Side Request Forgery. This issue affects Project Management System: before 4.09.31.125.
CVE-2022-46973CRITICALCVSS 9.8EG 9.8
2023-03-03
Report v0.9.8.6 was discovered to contain a Server-Side Request Forgery (SSRF) vulnerability.
CVE-2022-37938CRITICALCVSS 9.8EG 9.8
2023-03-01
Unauthenticated server side request forgery in HPE Serviceguard Manager
CVE-2022-46998CRITICALCVSS 9.8EG 9.8
2023-01-26
An issue in the website background of taocms v3.0.2 allows attackers to execute a Server-Side Request Forgery (SSRF).
CVE-2023-23560CRITICALCVSS 9.8EG 9.8
2023-01-23
In certain Lexmark products through 2023-01-12, SSRF can occur because of a lack of input validation.
CVE-2022-39039CRITICALCVSS 9.8EG 9.8
2023-01-03
aEnrich’s a+HRD has inadequate filtering for specific URL parameter. An unauthenticated remote attacker can exploit this vulnerability to send arbitrary HTTP(s) request to launch Server-Side Request Forgery (SSRF) attack, to perform arbi…
CVE-2022-47635CRITICALCVSS 9.8EG 9.8
2022-12-21
Wildix WMS 6 before 6.02.20221216, WMS 5 before 5.04.20221214, and WMS4 before 4.04.45396.23 allows Server-side request forgery (SSRF) via ZohoClient.php.
CVE-2022-46364CRITICALCVSS 9.8EG 9.8
2022-12-13
A SSRF vulnerability in parsing the href attribute of XOP:Include in MTOM requests in versions of Apache CXF before 3.5.5 and 3.4.10 allows an attacker to perform SSRF style attacks on webservices that take at least one parameter of any t…
CVE-2022-35508CRITICALCVSS 9.8EG 9.8
2022-12-04
Proxmox Virtual Environment (PVE) and Proxmox Mail Gateway (PMG) are vulnerable to SSRF when proxying HTTP requests between pve(pmg)proxy and pve(pmg)daemon. An attacker with an unprivileged account can craft an HTTP request to achieve SSR…
CVE-2022-41552CRITICALCVSS 9.8EG 9.8
2022-11-01
Server-Side Request Forgery (SSRF) vulnerability in Hitachi Infrastructure Analytics Advisor on Linux (Data Center Analytics, Analytics probe components), Hitachi Ops Center Analyzer on Linux (Hitachi Ops Center Analyzer detail view, Hitac…
CVE-2022-40296CRITICALCVSS 9.8EG 9.8
2022-10-31
The application was vulnerable to a Server-Side Request Forgery attacks, allowing the backend server to interact with unexpected endpoints, potentially including internal and local services, leading to attacks in other downstream systems.…
CVE-2022-38580CRITICALCVSS 9.8EG 9.8
2022-10-25
Zalando Skipper v0.13.236 is vulnerable to Server-Side Request Forgery (SSRF).
CVE-2022-42149CRITICALCVSS 9.8EG 9.8
2022-10-17
kkFileView 4.0 is vulnerable to Server-side request forgery (SSRF) via controller\OnlinePreviewController.java.
CVE-2022-41497CRITICALCVSS 9.8EG 9.8
2022-10-13
ClipperCMS 1.3.3 was discovered to contain a Server-Side Request Forgery (SSRF) via the pkg_url parameter at /manager/index.php.
CVE-2022-41496CRITICALCVSS 9.8EG 9.8
2022-10-13
iCMS v7.0.16 was discovered to contain a Server-Side Request Forgery (SSRF) via the url parameter at admincp.php.
CVE-2022-41495CRITICALCVSS 9.8EG 9.8
2022-10-13
ClipperCMS 1.3.3 was discovered to contain a Server-Side Request Forgery (SSRF) via the rss_url_news parameter at /manager/index.php.
CVE-2022-40357CRITICALCVSS 9.8EG 9.8
2022-09-20
A security issue was discovered in Z-BlogPHP <= 1.7.2. A Server-Side Request Forgery (SSRF) vulnerability in the zb_users/plugin/UEditor/php/action_crawler.php file allows remote attackers to force the application to make arbitrary request…
CVE-2022-38292CRITICALCVSS 9.8EG 9.8
2022-09-12
SLiMS Senayan Library Management System v9.4.2 was discovered to contain multiple Server-Side Request Forgeries via the components /bibliography/marcsru.php and /bibliography/z3950sru.php.
CVE-2022-40305CRITICALCVSS 9.8EG 9.8
2022-09-09
A Server-Side Request Forgery issue in Canto Cumulus through 11.1.3 allows attackers to enumerate the internal network, overload network resources, and possibly have unspecified other impact via the server parameter to the /cwc/login login…
CVE-2022-36663CRITICALCVSS 9.8EG 9.8
2022-09-06
Gluu Oxauth before v4.4.1 allows attackers to execute blind SSRF (Server-Side Request Forgery) attacks via a crafted request_uri parameter.
CVE-2021-27693CRITICALCVSS 9.8EG 9.8
2022-09-02
Server-side Request Forgery (SSRF) vulnerability in PublicCMS before 4.0.202011.b via /publiccms/admin/ueditor when the action is catchimage.
CVE-2022-35583CRITICALCVSS 9.8EG 9.8
2022-08-22
wkhtmlTOpdf 0.12.6 is vulnerable to SSRF which allows an attacker to get initial access into the target's system by injecting iframe tag with initial asset IP address on it's source. This allows the attacker to takeover the whole infrastru…
CVE-2022-32533CRITICALCVSS 9.8EG 9.8
2022-07-06
Apache Jetspeed-2 does not sufficiently filter untrusted user input by default leading to a number of issues including XSS, CSRF, XXE, and SSRF. Setting the configuration option "xss.filter.post = true" may mitigate these issues. NOTE: Apa…
CVE-2022-32995CRITICALCVSS 9.8EG 9.8
2022-06-27
Halo CMS v1.5.3 was discovered to contain a Server-Side Request Forgery (SSRF) via the template remote download function.
CVE-2022-2216CRITICALCVSS 9.8EG 9.8
2022-06-27
Server-Side Request Forgery (SSRF) in GitHub repository ionicabizau/parse-url prior to 7.0.0.
CVE-2021-41403CRITICALCVSS 9.8EG 9.8
2022-06-15
flatCore-CMS version 2.0.8 calls dangerous functions, causing server-side request forgery vulnerabilities.
CVE-2022-28616CRITICALCVSS 9.8EG 9.8
2022-05-17
A remote server-side request forgery (ssrf) vulnerability was discovered in HPE OneView version(s): Prior to 7.0. HPE has provided a software update to resolve this vulnerability in HPE OneView.

Map vulnerabilities like CWE-918 to your infrastructure

EchelonGraph correlates every CVE — across CWE-918 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.

Book a Demo →