CWE-918 · Server-Side Request Forgery (SSRF) (page 28)
Page 28 of 32 — CVEs classified under CWE-918, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-39497 | Critical | 9.8 | 2021-09-07 | eyoucms 1.5.4 lacks sanitization of input data, allowing an attacker to inject a url to trigger blind SSRF via the saveRemote() function. |
CVE-2021-39195 | High | 7.7 | 2021-09-07 | Misskey is an open source, decentralized microblogging platform. In affected versions a Server-Side Request Forgery vulnerability exists in "Upload from URL" a… |
CVE-2021-3758 | Medium | 6.5 | 2021-09-02 | bookstack is vulnerable to Server-Side Request Forgery (SSRF) |
CVE-2020-20341 | High | 7.5 | 2021-09-01 | YzmCMS v5.5 contains a server-side request forgery (SSRF) in the grab_image() function. |
CVE-2021-36043 | High | 8.0 | 2021-09-01 | Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by a blind SSRF vulnerability in the bundled dotmail… |
CVE-2021-22027 | High | 7.5 | 2021-08-30 | The vRealize Operations Manager API (8.x prior to 8.5) contains a Server Side Request Forgery in an end point. An unauthenticated malicious actor with network… |
CVE-2021-22026 | High | 7.5 | 2021-08-30 | The vRealize Operations Manager API (8.x prior to 8.5) contains a Server Side Request Forgery in an end point. An unauthenticated malicious actor with network… |
CVE-2020-14160 | High | 7.5 | 2021-08-26 | An SSRF vulnerability in Gotenberg through 6.2.1 exists in the remote URL to PDF conversion, which results in a remote attacker being able to read local files… |
CVE-2021-28627 | Medium | 5.4 | 2021-08-24 | Adobe Experience Manager Cloud Service offering, as well as versions 6.5.8.0 (and below) is affected by a Server-side Request Forgery. An authenticated attacke… |
CVE-2021-39152 | High | 8.5 | 2021-08-23 | XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to request data fro… |
CVE-2021-39150 | High | 8.5 | 2021-08-23 | XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to request data fro… |
CVE-2020-25353 | Medium | 6.5 | 2021-08-20 | A server-side request forgery (SSRF) vulnerability in rConfig 3.9.5 has been fixed for 3.9.6. This vulnerability allowed remote authenticated attackers to open… |
CVE-2021-22255 | High | 7.7 | 2021-08-20 | SSRF in URL file upload in Baserow <1.1.0 allows remote authenticated users to retrieve files from the internal server network exposed over HTTP by inserting a… |
CVE-2021-37711 | High | 8.8 | 2021-08-16 | Versions prior to 6.4.3.1 contain an authenticated server-side request forgery vulnerability in file upload via URL. Version 6.4.3.1 contains a patch. As worka… |
CVE-2021-37353 | Critical | 9.8 | 2021-08-13 | Nagios XI Docker Wizard before version 1.1.3 is vulnerable to SSRF due to improper sanitation in table_population.php. |
CVE-2021-32603 | High | 8.8 | 2021-08-05 | A server-side request forgery (SSRF) (CWE-918) vulnerability in FortiManager and FortiAnalyser GUI 7.0.0, 6.4.5 and below, 6.2.7 and below, 6.0.11 and below, 5… |
CVE-2021-24472 | Critical | 9.8 | 2021-08-02 | The OnAir2 WordPress theme before 3.9.9.2 and QT KenthaRadio WordPress plugin before 2.0.2 have exposed proxy functionality to unauthenticated users, sending r… |
CVE-2021-24371 | Low | 2.7 | 2021-08-02 | The Import feature of the RSVPMaker WordPress plugin before 8.7.3 (/wp-admin/tools.php?page=rsvpmaker_export_screen) takes an URL input and calls curl on it, w… |
CVE-2021-20788 | Medium | 4.3 | 2021-07-30 | Server-side request forgery (SSRF) vulnerability in GroupSession (GroupSession Free edition from ver2.2.0 to the version prior to ver5.1.0, GroupSession byClou… |
CVE-2020-4974 | Medium | 6.3 | 2021-07-28 | IBM Jazz Foundation products are vulnerable to server side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from… |
CVE-2021-26699 | Medium | 5.4 | 2021-07-22 | OX App Suite before 7.10.3-rev4 and 7.10.4 before 7.10.4-rev4 allows SSRF via a shared SVG document that is mishandled by the imageconverter component when the… |
CVE-2021-22726 | High | 8.1 | 2021-07-21 | A CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists in EVlink City (EVC1S22P4 / EVC1S7P4 all versions prior to R8 V3.4.0.1), EVlink Parking (EVW… |
CVE-2021-31216 | High | 8.1 | 2021-07-19 | Siren Investigate before 11.1.1 contains a server side request forgery (SSRF) defect in the built-in image proxy route (which is enabled by default). An attack… |
CVE-2021-29749 | Medium | 5.4 | 2021-07-15 | IBM Secure External Authentication Server 6.0.2 and IBM Secure Proxy 6.0.2 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated… |
CVE-2021-34473 | Critical | 9.1 | 2021-07-14 | Microsoft Exchange Server Remote Code Execution Vulnerability |
CVE-2021-33213 | Medium | 6.5 | 2021-07-14 | An SSRF vulnerability in the "Upload from URL" feature in Elements-IT HTTP Commander 5.3.3 allows remote authenticated users to retrieve HTTP and FTP files fro… |
CVE-2020-23079 | High | 7.5 | 2021-07-12 | SSRF vulnerability in Halo <=1.3.2 exists in the SMTP configuration, which can detect the server intranet. |
CVE-2021-29102 | Critical | 9.1 | 2021-07-11 | A Server-Side Request Forgery (SSRF) vulnerability in ArcGIS Server Manager version 10.8.1 and below may allow a remote, unauthenticated attacker to forge GET… |
CVE-2020-20582 | High | 7.5 | 2021-07-08 | A server side request forgery (SSRF) vulnerability in /ApiAdminDomainSettings.php of MipCMS 5.0.1 allows attackers to access sensitive information. |
CVE-2020-24149 | High | 7.5 | 2021-07-07 | Server-side request forgery (SSRF) in the Podcast Importer SecondLine (podcast-importer-secondline) plugin 1.1.4 for WordPress via the podcast_feed parameter i… |
CVE-2020-24148 | Critical | 9.1 | 2021-07-07 | Server-side request forgery (SSRF) in the Import XML and RSS Feeds (import-xml-feed) plugin 2.0.1 for WordPress via the data parameter in a moove_read_xml acti… |
CVE-2020-24147 | Critical | 9.1 | 2021-07-07 | Server-side request forgery (SSR) vulnerability in the WP Smart Import (wp-smart-import) plugin 1.0.0 for WordPress via the file field. |
CVE-2020-24142 | Critical | 9.8 | 2021-07-07 | Server-side request forgery in the Video Downloader for TikTok (aka downloader-tiktok) plugin 1.3 for WordPress lets an attacker send crafted requests from the… |
CVE-2020-24141 | Medium | 5.3 | 2021-07-07 | Server-side request forgery in the WP-DownloadManager plugin 1.68.4 for WordPress lets an attacker send crafted requests from the back-end server of a vulnerab… |
CVE-2021-35209 | Critical | 9.8 | 2021-07-02 | An issue was discovered in ProxyServlet.java in the /proxy servlet in Zimbra Collaboration Suite 8.8 before 8.8.15 Patch 23 and 9.x before 9.0.0 Patch 16. The… |
CVE-2021-32639 | High | 7.2 | 2021-07-02 | Emissary is a P2P-based, data-driven workflow engine. Emissary version 6.4.0 is vulnerable to Server-Side Request Forgery (SSRF). In particular, the `RegisterP… |
CVE-2021-31531 | Critical | 9.8 | 2021-06-29 | Zoho ManageEngine ServiceDesk Plus MSP before 10521 is vulnerable to Server-Side Request Forgery (SSRF). |
CVE-2020-21788 | Medium | 4.3 | 2021-06-24 | In CRMEB 3.1.0+ strict domain name filtering leads to SSRF(Server-Side Request Forgery). The vulnerable code is in file /crmeb/app/admin/controller/store/CopyT… |
CVE-2021-32698 | Medium | 6.8 | 2021-06-21 | eLabFTW is an open source electronic lab notebook for research labs. This vulnerability allows an attacker to make GET requests on behalf of the server. It is… |
CVE-2021-34811 | Medium | 5.0 | 2021-06-18 | Server-Side Request Forgery (SSRF) vulnerability in task management component in Synology Download Station before 3.8.16-3566 allows remote authenticated users… |
CVE-2021-34808 | Medium | 5.8 | 2021-06-18 | Server-Side Request Forgery (SSRF) vulnerability in cgi component in Synology Media Server before 1.8.3-2881 allows remote attackers to access intranet resourc… |
CVE-2021-20483 | Medium | 6.5 | 2021-06-16 | IBM Security Identity Manager 6.0.2 is vulnerable to server-side request forgery (SSRF). By sending a specially crafted request, a remote authenticated attacke… |
CVE-2021-32682 | Critical | 9.8 | 2021-06-14 | elFinder is an open-source file manager for web, written in JavaScript using jQuery UI. Several vulnerabilities affect elFinder 2.1.58. These vulnerabilities c… |
CVE-2021-22175 | Medium | 6.8 | 2021-06-11 | When requests to the internal network for webhooks are enabled, a server-side request forgery vulnerability in GitLab affecting all versions starting from 10.5… |
CVE-2020-15377 | Critical | 9.8 | 2021-06-09 | Webtools in Brocade SANnav before version 2.1.1 allows unauthenticated users to make requests to arbitrary hosts due to a misconfiguration; this is commonly re… |
CVE-2021-31950 | High | 7.6 | 2021-06-08 | Microsoft SharePoint Server Spoofing Vulnerability |
CVE-2021-33571 | High | 7.5 | 2021-06-08 | In Django 2.2 before 2.2.24, 3.x before 3.1.12, and 3.2 before 3.2.4, URLValidator, validate_ipv4_address, and validate_ipv46_address do not prohibit leading z… |
CVE-2021-22214 | Medium | 6.8 | 2021-06-08 | When requests to the internal network for webhooks are enabled, a server-side request forgery vulnerability in GitLab CE/EE affecting all versions starting fro… |
CVE-2020-35970 | High | 7.5 | 2021-06-03 | An issue was discovered in YzmCMS 5.8. There is a SSRF vulnerability in the background collection management that allows arbitrary file read. |
CVE-2021-20348 | Medium | 5.4 | 2021-06-02 | IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unautho… |
CVE-2021-20347 | Medium | 5.4 | 2021-06-02 | IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unautho… |
CVE-2021-20346 | Medium | 5.4 | 2021-06-02 | IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unautho… |
CVE-2021-20345 | Medium | 5.4 | 2021-06-02 | IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unautho… |
CVE-2021-20343 | Medium | 5.4 | 2021-06-02 | IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unautho… |
CVE-2021-33184 | High | 7.7 | 2021-06-01 | Server-Side request forgery (SSRF) vulnerability in task management component in Synology Download Station before 3.8.15-3563 allows remote authenticated users… |
CVE-2021-33181 | Medium | 6.6 | 2021-06-01 | Server-Side Request Forgery (SSRF) vulnerability in webapi component in Synology Video Station before 2.4.10-1632 allows remote authenticated users to send arb… |
CVE-2021-25640 | Medium | 6.1 | 2021-06-01 | In Apache Dubbo prior to 2.6.9 and 2.7.9, the usage of parseURL method will lead to the bypass of white host check which can cause open redirect or SSRF vulner… |
CVE-2020-14328 | Low | 3.3 | 2021-05-27 | A flaw was found in Ansible Tower in versions before 3.7.2. A Server Side Request Forgery flaw can be abused by supplying a URL which could lead to the server… |
CVE-2020-14327 | Medium | 5.5 | 2021-05-27 | A Server-side request forgery (SSRF) flaw was found in Ansible Tower in versions before 3.6.5 and before 3.7.2. Functionality on the Tower server is abused by… |
CVE-2021-21985 | Critical | 9.8 | 2021-05-26 | The vSphere Client (HTML5) contains a remote code execution vulnerability due to lack of input validation in the Virtual SAN Health Check plug-in which is enab… |
CVE-2021-30108 | Critical | 9.1 | 2021-05-24 | Feehi CMS 2.1.1 is affected by a Server-side request forgery (SSRF) vulnerability. When the user modifies the HTTP Referer header to any url, the server can ma… |
CVE-2021-33511 | High | 7.5 | 2021-05-21 | Plone though 5.2.4 allows SSRF via the lxml parser. This affects Diazo themes, Dexterity TTW schemas, and modeleditors in plone.app.theming, plone.app.dexterit… |
CVE-2021-33510 | Medium | 4.3 | 2021-05-21 | Plone through 5.2.4 allows remote authenticated managers to conduct SSRF attacks via an event ical URL, to read one line of a file. |
CVE-2017-17674 | Critical | 9.8 | 2021-05-19 | BMC Remedy Mid Tier 9.1SP3 is affected by remote and local file inclusion. Due to the lack of restrictions on what can be targeted, the system can be vulnerabl… |
CVE-2021-20535 | Medium | 5.4 | 2021-05-13 | IBM Jazz Reporting Service 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send… |
CVE-2021-31910 | High | 7.5 | 2021-05-11 | In JetBrains TeamCity before 2020.2.3, information disclosure via SSRF was possible. |
CVE-2020-29445 | Medium | 4.3 | 2021-05-07 | Affected versions of Confluence Server before 7.4.8, and versions from 7.5.0 before 7.11.0 allow attackers to identify internal hosts and ports via a blind ser… |
CVE-2021-31828 | High | 7.1 | 2021-05-06 | An SSRF issue in Open Distro for Elasticsearch (ODFE) before 1.13.1.0 allows an existing privileged user to enumerate listening services or interact with confi… |
CVE-2021-29490 | Medium | 5.8 | 2021-05-06 | Jellyfin is a free software media system that provides media from a dedicated server to end-user devices via multiple apps. Verions prior to 10.7.3 vulnerable… |
CVE-2020-28943 | Medium | 6.5 | 2021-04-30 | OX App Suite 7.10.4 and earlier allows SSRF via a snippet. |
CVE-2020-22002 | High | 7.5 | 2021-04-29 | An Unauthenticated Server-Side Request Forgery (SSRF) vulnerability exists in Inim Electronics Smartliving SmartLAN/G/SI <=6.x within the GetImage functionalit… |
CVE-2021-29145 | Critical | 9.8 | 2021-04-29 | A remote server side request forgery (SSRF) remote code execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s) prior to 6.9.5, 6.8… |
CVE-2021-31779 | Medium | 6.4 | 2021-04-28 | The yoast_seo (aka Yoast SEO) extension before 7.2.1 for TYPO3 allows SSRF via a backend user account. |
CVE-2021-29475 | Critical | 10.0 | 2021-04-26 | HedgeDoc (formerly known as CodiMD) is an open-source collaborative markdown editor. An attacker is able to receive arbitrary files from the file system when e… |
CVE-2020-35313 | Critical | 9.8 | 2021-04-20 | A server-side request forgery (SSRF) vulnerability in the addCustomThemePluginRepository function in index.php in WonderCMS 3.1.3 allows remote attackers to ex… |
CVE-2021-29431 | High | 7.7 | 2021-04-15 | Sydent is a reference Matrix identity server. Sydent can be induced to send HTTP GET requests to internal systems, due to lack of parameter validation or IP ad… |
CVE-2021-28060 | Medium | 5.3 | 2021-04-14 | A Server-Side Request Forgery (SSRF) vulnerability in Group Office 6.4.196 allows a remote attacker to forge GET requests to arbitrary URLs via the url paramet… |
CVE-2021-27905 | Critical | 9.8 | 2021-04-13 | The ReplicationHandler (normally registered at "/replication" under a Solr core) in Apache Solr has a "masterUrl" (also "leaderUrl" alias) parameter that is us… |
CVE-2021-29357 | High | 8.6 | 2021-04-12 | The ECT Provider component in OutSystems Platform Server 10 before 10.0.1104.0 and 11 before 11.9.0 (and LifeTime management console before 11.7.0) allows SSRF… |
CVE-2021-20480 | Medium | 6.5 | 2021-04-08 | IBM WebSphere Application Server 7.0, 8.0, and 8.5 is vulnerable to server-side request forgery (SSRF). By sending a specially crafted request, a remote authen… |
CVE-2020-24140 | High | 8.3 | 2021-04-07 | Server-side request forgery in Wcms 0.3.2 let an attacker send crafted requests from the back-end server of a vulnerable web application via the pagename param… |
CVE-2020-24139 | High | 8.3 | 2021-04-07 | Server-side request forgery in Wcms 0.3.2 lets an attacker send crafted requests from the back-end server of a vulnerable web application via the path paramete… |
CVE-2021-24150 | High | 7.5 | 2021-04-05 | The LikeBtn WordPress Like Button Rating ♥ LikeBtn WordPress plugin before 2.6.32 was vulnerable to Unauthenticated Full-Read Server-Side Request Forgery (SSRF… |
CVE-2021-28941 | Medium | 5.3 | 2021-04-02 | Because of no validation on a curl command in MagpieRSS 0.72 in the /extlib/Snoopy.class.inc file, when you send a request to the /scripts/magpie_debug.php or… |
CVE-2021-22696 | High | 7.5 | 2021-04-02 | CXF supports (via JwtRequestCodeFilter) passing OAuth 2 parameters via a JWT token as opposed to query parameters (see: The OAuth 2.0 Authorization Framework… |
CVE-2021-26072 | Medium | 4.3 | 2021-04-01 | The WidgetConnector plugin in Confluence Server and Confluence Data Center before version 5.8.6 allowed remote attackers to manipulate the content of internal… |
CVE-2020-19613 | High | 7.5 | 2021-04-01 | Server Side Request Forgery (SSRF) vulnerability in saveUrlAs function in ImagesService.java in sunkaifei FlyCMS version 20190503. |
CVE-2021-21975 | High | 7.5 | 2021-03-31 | Server Side Request Forgery in vRealize Operations Manager API (CVE-2021-21975) prior to 8.4 may allow a malicious actor with network access to the vRealize Op… |
CVE-2021-22986 | Critical | 9.8 | 2021-03-31 | On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, and 12.1.x before 12.1.5.3 amd BIG-IQ 7.1.0.x… |
CVE-2021-1627 | Critical | 9.8 | 2021-03-26 | MuleSoft is aware of a Server Side Request Forgery vulnerability affecting certain versions of a Mule runtime component that may affect both CloudHub and on-pr… |
CVE-2021-26715 | Critical | 9.1 | 2021-03-25 | The OpenID Connect server implementation for MITREid Connect through 1.3.3 contains a Server Side Request Forgery (SSRF) vulnerability. The vulnerability arise… |
CVE-2021-22179 | Medium | 5.4 | 2021-03-24 | A vulnerability was discovered in GitLab versions before 12.2. GitLab was vulnerable to a SSRF attack through the Outbound Requests feature. |
CVE-2021-22178 | Medium | 5.0 | 2021-03-24 | An issue has been discovered in GitLab affecting all versions starting from 13.2. Gitlab was vulnerable to SRRF attack through the Prometheus integration. |
CVE-2020-15809 | Medium | 6.5 | 2021-03-24 | spxmanage on certain SpinetiX devices allows requests that access unintended resources because of SSRF and Path Traversal. This affects HMP350, HMP300, and DiV… |
CVE-2021-21349 | Medium | 6.1 | 2021-03-23 | XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attac… |
CVE-2021-21342 | Medium | 5.3 | 2021-03-23 | XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability where the processed stream at… |
CVE-2020-4882 | Medium | 6.1 | 2021-03-22 | IBM Planning Analytics 2.0 could be vulnerable to a Server-Side Request Forgery (SSRF) attack by constucting URLs from user-controlled data . This could enable… |
CVE-2020-5014 | Medium | 6.7 | 2021-03-08 | IBM DataPower Gateway V10 and V2018 could allow a local attacker with administrative privileges to execute arbitrary code on the system using a server-side req… |
CVE-2021-26855 | Critical | 9.1 | 2021-03-03 | Microsoft Exchange Server Remote Code Execution Vulnerability |
CVE-2020-12529 | Medium | 5.8 | 2021-03-02 | An issue was discovered in MB connect line mymbCONNECT24 and mbCONNECT24 software in all versions through V2.6.2 There is a SSRF in the LDAP access check, allo… |