CWE-918— Server-Side Request Forgery (SSRF)
The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.— MITRE CWE catalog
4,205 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →
CVEs classified under CWE-918page 66 of 85
- CVE-2024-33592MEDIUMCVSS 5.4EG 5.42024-04-25
Server-Side Request Forgery (SSRF) vulnerability in SoftLab Radio Player.This issue affects Radio Player: from n/a through 2.0.73.
- CVE-2024-32812MEDIUMCVSS 5.4EG 5.42024-04-24
Server-Side Request Forgery (SSRF) vulnerability in Podlove Podlove Podcast Publisher.This issue affects Podlove Podcast Publisher: from n/a through 4.0.11.
- CVE-2024-30453MEDIUMCVSS 5.4EG 5.42024-03-29
Server-Side Request Forgery (SSRF) vulnerability in Brave Brave Popup Builder.This issue affects Brave Popup Builder: from n/a through 0.6.5.
- CVE-2024-28435MEDIUMCVSS 5.4EG 5.42024-03-25
The CRM platform Twenty version 0.3.0 is vulnerable to SSRF via file upload.
- CVE-2024-27949MEDIUMCVSS 5.4EG 5.42024-03-01
Server-Side Request Forgery (SSRF) vulnerability in Sirv CDN and Image Hosting Sirv sirv.This issue affects Sirv: from n/a through <= 7.2.0.
- CVE-2024-1758MEDIUMCVSS 5.4EG 5.42024-02-26
The SuperFaktura WooCommerce plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.40.3 via the wc_sf_url_check function. This makes it possible for authenticated attackers, with subscrib…
- CVE-2023-38627MEDIUMCVSS 5.4EG 5.42024-01-23
A post-authenticated server-side request forgery (SSRF) vulnerability in Trend Micro Apex Central 2019 (lower than build 6481) could allow an attacker to interact with internal or local services directly. Please note: an attacker must f…
- CVE-2023-38626MEDIUMCVSS 5.4EG 5.42024-01-23
A post-authenticated server-side request forgery (SSRF) vulnerability in Trend Micro Apex Central 2019 (lower than build 6481) could allow an attacker to interact with internal or local services directly. Please note: an attacker must f…
- CVE-2023-38625MEDIUMCVSS 5.4EG 5.42024-01-23
A post-authenticated server-side request forgery (SSRF) vulnerability in Trend Micro Apex Central 2019 (lower than build 6481) could allow an attacker to interact with internal or local services directly. Please note: an attacker must f…
- CVE-2023-38624MEDIUMCVSS 5.4EG 5.42024-01-23
A post-authenticated server-side request forgery (SSRF) vulnerability in Trend Micro Apex Central 2019 (lower than build 6481) could allow an attacker to interact with internal or local services directly. Please note: an attacker must f…
- CVE-2023-32337MEDIUMCVSS 5.4EG 5.42024-01-19
IBM Maximo Spatial Asset Management 8.10 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitatin…
- CVE-2023-46641MEDIUMCVSS 5.4EG 5.42023-12-07
Server-Side Request Forgery (SSRF) vulnerability in Code for Recovery 12 Step Meeting List.This issue affects 12 Step Meeting List: from n/a through 3.14.24.
- CVE-2023-35896MEDIUMCVSS 5.4EG 5.42023-11-03
IBM Content Navigator 3.0.13 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other atta…
- CVE-2023-43798MEDIUMCVSS 5.4EG 5.42023-10-30
BigBlueButton is an open-source virtual classroom. BigBlueButton prior to versions 2.6.12 and 2.7.0-rc.1 is vulnerable to Server-Side Request Forgery (SSRF). This issue is a bypass of CVE-2023-33176. A patch in versions 2.6.12 and 2.7.0-rc…
- CVE-2023-4893MEDIUMCVSS 5.4EG 5.42023-09-12
The Crayon Syntax Highlighter plugin for WordPress is vulnerable to Server Side Request Forgery via the 'crayon' shortcode in versions up to, and including, 2.8.4. This can allow authenticated attackers with contributor-level permissions o…
- CVE-2023-4878MEDIUMCVSS 5.4EG 5.42023-09-10
Server-Side Request Forgery (SSRF) in GitHub repository instantsoft/icms2 prior to 2.16.1-git.
- CVE-2023-41327MEDIUMCVSS 5.4EG 5.42023-09-06
WireMock is a tool for mocking HTTP services. WireMock can be configured to only permit proxying (and therefore recording) to certain addresses. This is achieved via a list of allowed address rules and a list of denied address rules, where…
- CVE-2023-36387MEDIUMCVSS 5.4EG 5.42023-09-06
An improper default REST API permission for Gamma users in Apache Superset up to and including 2.1.0 allows for an authenticated Gamma user to test database connections.
- CVE-2023-35011MEDIUMCVSS 5.4EG 5.42023-08-16
IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or faci…
- CVE-2023-32052MEDIUMCVSS 5.4EG 5.42023-07-11
Microsoft Power Apps (online) Spoofing Vulnerability
- CVE-2022-22416MEDIUMCVSS 5.4EG 5.42022-07-19
IBM Sterling Partner Engagement Manager 6.1.2, 6.2, and Cloud/SasS 22.2 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to net…
- CVE-2021-29738MEDIUMCVSS 5.4EG 5.42021-11-02
IBM InfoSphere Data Flow Designer (IBM InfoSphere Information Server 11.7 ) is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to…
- CVE-2021-39894MEDIUMCVSS 5.4EG 5.42021-10-05
In all versions of GitLab CE/EE since version 8.0, a DNS rebinding vulnerability exists in Fogbugz importer which may be used by attackers to exploit Server Side Request Forgery attacks.
- CVE-2021-26699MEDIUMCVSS 5.4EG 5.42021-07-22
OX App Suite before 7.10.3-rev4 and 7.10.4 before 7.10.4-rev4 allows SSRF via a shared SVG document that is mishandled by the imageconverter component when the .png extension is used.
- CVE-2021-29749MEDIUMCVSS 5.4EG 5.42021-07-15
IBM Secure External Authentication Server 6.0.2 and IBM Secure Proxy 6.0.2 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to …
- CVE-2021-20348MEDIUMCVSS 5.4EG 5.42021-06-02
IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or fa…
- CVE-2021-20347MEDIUMCVSS 5.4EG 5.42021-06-02
IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or fa…
- CVE-2021-20346MEDIUMCVSS 5.4EG 5.42021-06-02
IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or fa…
- CVE-2021-20345MEDIUMCVSS 5.4EG 5.42021-06-02
IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or fa…
- CVE-2021-20343MEDIUMCVSS 5.4EG 5.42021-06-02
IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or fa…
- CVE-2021-20535MEDIUMCVSS 5.4EG 5.42021-05-13
IBM Jazz Reporting Service 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumerati…
- CVE-2021-22179MEDIUMCVSS 5.4EG 5.42021-03-24
A vulnerability was discovered in GitLab versions before 12.2. GitLab was vulnerable to a SSRF attack through the Outbound Requests feature.
- CVE-2020-24700MEDIUMCVSS 5.4EG 5.42021-01-12
OX App Suite through 7.10.3 allows SSRF because GET requests are sent to arbitrary domain names with an initial autoconfig. substring.
- CVE-2020-13309MEDIUMCVSS 5.4EG 5.42020-09-14
A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. GitLab was vulnerable to a blind SSRF attack through the repository mirroring feature.
- CVE-2020-13295MEDIUMCVSS 5.4EG 5.42020-08-10
For GitLab Runner before 13.0.12, 13.1.6, 13.2.3, by replacing dockerd with a malicious server, the Shared Runner is susceptible to SSRF.
- CVE-2019-14225MEDIUMCVSS 5.4EG 5.42019-10-14
OX App Suite 7.10.1 and 7.10.2 allows SSRF.
- CVE-2018-13103MEDIUMCVSS 5.4EG 5.42019-03-21
OX App Suite 7.8.4 and earlier allows SSRF.
- CVE-2018-1000188MEDIUMCVSS 5.4EG 5.42018-06-05
A server-side request forgery vulnerability exists in Jenkins CAS Plugin 1.4.1 and older in CasSecurityRealm.java that allows attackers with Overall/Read access to cause Jenkins to send a GET request to a specified URL.
- CVE-2018-1000184MEDIUMCVSS 5.4EG 5.42018-06-05
A server-side request forgery vulnerability exists in Jenkins GitHub Plugin 1.29.0 and older in GitHubPluginConfig.java that allows attackers with Overall/Read access to cause Jenkins to send a GET request to a specified URL.
- CVE-2025-36243MEDIUMCVSS 4.3EG 5.42026-02-17
IBM Concert 1.0.0 through 2.1.0 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other a…
- CVE-2018-25031MEDIUMCVSS 4.3EG 5.42022-03-11
Swagger UI 4.1.2 and earlier could allow a remote attacker to conduct spoofing attacks. By persuading a victim to open a crafted URL, an attacker could exploit this vulnerability to display remote OpenAPI definitions. Note: This was origin…
- CVE-2026-123844MEDIUMCVSS 5.3EG 5.32026-11-06
In JetBrains IntelliJ IDEA before 2026.3 sSRF was possible via custom plugin repositories
- CVE-2026-123201MEDIUMCVSS 5.3EG 5.32026-11-05
Buku (bukuserver) through 5.1.1 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to make the server request internal hosts by supplying a url parameter to /api/fetch_data or /api/network_ha…
- CVE-2026-114582MEDIUMCVSS 5.3EG 5.32026-11-03
An issue was discovered in Django 6.1 before 6.1.3, 6.0 before 6.0.10, and 5.2 before 5.2.19. `django.contrib.gis.gdal.SpatialReference` (and related `transform()` methods and `srs`/`srid` setters) do not restrict GDAL’s file and network…
- CVE-2026-111362MEDIUMCVSS 5.3EG 5.32026-11-03
An issue was discovered in Django 6.1 before 6.1.3, 6.0 before 6.0.10, and 5.2 before 5.2.19. `django.contrib.gis.gdal.OGRGeometry` does not restrict external coordinate reference system definitions in GeoJSON input, which allows remote at…
- CVE-2026-121431MEDIUMCVSS 5.3EG 5.32026-11-03
AzuraCast before 0.24.0 contains a server-side request forgery vulnerability that allows station users with WebHooks permission to bypass the UserUrlFilter guard via the Mastodon, Telegram, GroupMe, and RadioReg connectors. Attackers can s…
- CVE-2026-120331MEDIUMCVSS 5.3EG 5.32026-11-03
Content of external URL mails, their stylesheets and images to embed is fetched by the server without validating the target host. Backend users with access to the mail module can make the server send requests to hosts in the internal netwo…
- CVE-2026-120416MEDIUMCVSS 5.3EG 5.32026-11-02
A security vulnerability has been detected in AndyFactory newspaper4k up to 0.9.6. This affects the function Article.parse of the file newspaper/extractors/image_extractor.py of the component Image Extractor. Such manipulation leads to ser…
- CVE-2026-119342MEDIUMCVSS 5.3EG 5.32026-10-30
Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files. From 2.13.1 until 2.13.2, the POST /api/v1/convert/svg/pdf endpoint renders attacker-supplied SVG through Apache Batik, and a scheme-less ro…
- CVE-2026-119545MEDIUMCVSS 5.3EG 5.32026-10-30
Forgejo through 15.0.11, 16.0.0 through 16.0.7, and 17.0.0 through 17.0.1 contains a server-side request forgery vulnerability that allows unauthenticated attackers to make the server issue requests by submitting arbitrary OpenID identifie…
Map vulnerabilities like CWE-918 to your infrastructure
EchelonGraph correlates every CVE — across CWE-918 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.
Book a Demo →