CWE-918 · Server-Side Request Forgery (SSRF) (page 29)
Page 29 of 32 — CVEs classified under CWE-918, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-23345 | Medium | 5.3 | 2021-02-26 | All versions of package github.com/thecodingmachine/gotenberg are vulnerable to Server-side Request Forgery (SSRF) via the /convert/html endpoint when the src… |
CVE-2020-23534 | Critical | 9.8 | 2021-02-25 | A server-side request forgery (SSRF) vulnerability in Upgrade.php of gopeak masterlab 2.1.5, via the 'source' parameter. |
CVE-2021-27670 | Critical | 9.8 | 2021-02-25 | Appspace 6.2.4 allows SSRF via the api/v1/core/proxy/jsonprequest url parameter. |
CVE-2020-11988 | High | 8.2 | 2021-02-24 | Apache XmlGraphics Commons 2.4 and earlier is vulnerable to server-side request forgery, caused by improper input validation by the XMPParser. By using a speci… |
CVE-2020-11987 | High | 8.2 | 2021-02-24 | Apache Batik 1.13 is vulnerable to server-side request forgery, caused by improper input validation by the NodePickerPanel. By using a specially-crafted argume… |
CVE-2021-21973 | Medium | 5.3 | 2021-02-24 | The vSphere Client (HTML5) contains an SSRF (Server Side Request Forgery) vulnerability due to improper validation of URLs in a vCenter Server plugin. A malici… |
CVE-2020-8902 | Low | 3.5 | 2021-02-23 | Rendertron versions prior to 3.0.0 are are susceptible to a Server-Side Request Forgery (SSRF) attack. An attacker can use a specially crafted webpage to force… |
CVE-2020-36232 | Medium | 5.0 | 2021-02-22 | The MessageBundleWhiteList class of atlassian-gadgets before version 4.2.37, from version 4.3.0 before 4.3.14, from version 4.3.2.0 before 4.3.2.4, from versio… |
CVE-2021-27214 | Medium | 6.1 | 2021-02-19 | A Server-side request forgery (SSRF) vulnerability in the ProductConfig servlet in Zoho ManageEngine ADSelfService Plus through 6013 allows a remote unauthenti… |
CVE-2021-3204 | Medium | 6.5 | 2021-02-19 | SSRF in the document conversion component of Webware Webdesktop 5.1.15 allows an attacker to read all files from the server. |
CVE-2020-10252 | High | 8.3 | 2021-02-19 | An issue was discovered in ownCloud before 10.4. Because of an SSRF issue (via the apps/files_sharing/external remote parameter), an authenticated attacker can… |
CVE-2021-27329 | Critical | 10.0 | 2021-02-18 | Friendica 2021.01 allows SSRF via parse_url?binurl= for DNS lookups or HTTP requests to arbitrary domain names. |
CVE-2020-28463 | Medium | 6.5 | 2021-02-18 | All versions of package reportlab are vulnerable to Server-side Request Forgery (SSRF) via img tags. In order to reduce risk, use trustedSchemes & trustedHosts… |
CVE-2021-27103 | Critical | 9.8 | 2021-02-16 | Accellion FTA 9_12_411 and earlier is affected by SSRF via a crafted POST request to wmProgressstat.html. The fixed version is FTA_9_12_416 and later. |
CVE-2020-35561 | Medium | 5.3 | 2021-02-16 | An issue was discovered MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2. There is an SSRF i… |
CVE-2020-35558 | High | 7.5 | 2021-02-16 | An issue was discovered in MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual through 2.11.2. There is an SSRF in the in the M… |
CVE-2021-21311 | High | 7.2 | 2021-02-11 | Adminer is an open-source database management in a single PHP file. In adminer from version 4.0.0 and before 4.7.9 there is a server-side request forgery vulne… |
CVE-2021-21288 | Medium | 4.3 | 2021-02-08 | CarrierWave is an open-source RubyGem which provides a simple and flexible way to upload files from Ruby applications. In CarrierWave before versions 1.3.2 and… |
CVE-2021-25241 | Medium | 5.3 | 2021-02-04 | A server-side request forgery (SSRF) information disclosure vulnerability in Trend Micro Apex One and Worry-Free Business Security 10.0 SP1 could allow an unau… |
CVE-2021-25236 | Medium | 5.3 | 2021-02-04 | A server-side request forgery (SSRF) information disclosure vulnerability in Trend Micro OfficeScan XG SP1 and Worry-Free Business Security 10.0 SP1 could allo… |
CVE-2020-35667 | High | 7.5 | 2021-02-03 | JetBrains TeamCity Plugin before 2020.2.85695 SSRF. Vulnerability that could potentially expose user credentials. |
CVE-2021-21287 | High | 7.7 | 2021-02-01 | MinIO is a High Performance Object Storage released under Apache License v2.0. In MinIO before version RELEASE.2021-01-30T00-20-58Z there is a server-side requ… |
CVE-2020-4787 | Low | 2.3 | 2021-01-27 | IBM QRadar SIEM 7.4.2 GA to 7.4.2 Patch 1, 7.4.0 to 7.4.1 Patch 1, and 7.3.0 to 7.3.3 Patch 5 is vulnerable to server side request forgery (SSRF). This may all… |
CVE-2020-4786 | Medium | 4.3 | 2021-01-27 | IBM QRadar SIEM 7.4.2 GA to 7.4.2 Patch 1, 7.4.0 to 7.4.1 Patch 1, and 7.3.0 to 7.3.3 Patch 5 is vulnerable to server side request forgery (SSRF). This may all… |
CVE-2020-23776 | High | 7.5 | 2021-01-26 | A SSRF vulnerability exists in Winmail 6.5 in app.php in the key parameter when HTTPS is on. An attacker can use this vulnerability to cause the server to send… |
CVE-2020-36200 | Medium | 6.5 | 2021-01-26 | TinyCheck before commits 9fd360d and ea53de8 allowed an authenticated attacker to send an HTTP GET request to the crafted URLs. |
CVE-2021-1272 | High | 8.8 | 2021-01-20 | A vulnerability in the session validation feature of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass access… |
CVE-2020-24641 | High | 7.5 | 2021-01-15 | In Aruba AirWave Glass before 1.3.3, there is a Server-Side Request Forgery vulnerability through an unauthenticated endpoint that if successfully exploited ca… |
CVE-2021-21009 | High | 8.6 | 2021-01-13 | Adobe Campaign Classic Gold Standard 10 (and earlier), 20.3.1 (and earlier), 20.2.3 (and earlier), 20.1.3 (and earlier), 19.2.3 (and earlier) and 19.1.7 (and e… |
CVE-2021-23927 | Medium | 6.4 | 2021-01-12 | OX App Suite through 7.10.4 allows SSRF via a URL with an @ character in an appsuite/api/oauth/proxy PUT request. |
CVE-2020-24700 | Medium | 5.4 | 2021-01-12 | OX App Suite through 7.10.3 allows SSRF because GET requests are sent to arbitrary domain names with an initial autoconfig. substring. |
CVE-2020-35205 | Critical | 9.8 | 2021-01-11 | Server Side Request Forgery (SSRF) in Web Compliance Manager in Quest Policy Authority version 8.1.2.200 allows attackers to scan internal ports and make outbo… |
CVE-2020-28735 | High | 8.8 | 2020-12-30 | Plone before 5.2.3 allows SSRF attacks via the tracebacks feature (only available to the Manager role). |
CVE-2020-35850 | Medium | 6.5 | 2020-12-30 | An SSRF issue was discovered in cockpit-project.org Cockpit 234. NOTE: this is unrelated to the Agentejo Cockpit product. NOTE: the vendor states "I don't thin… |
CVE-2020-26032 | High | 7.5 | 2020-12-28 | An SSRF issue was discovered in Zammad before 3.4.1. The SMS configuration interface for Massenversand is implemented in a way that renders the result of a tes… |
CVE-2020-35712 | Critical | 9.8 | 2020-12-26 | Esri ArcGIS Server before 10.8 is vulnerable to SSRF in some configurations. |
CVE-2020-8464 | High | 7.5 | 2020-12-17 | A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 SP2 could allow an attacker to send requests that appear to come from the localhost… |
CVE-2019-14476 | Medium | 6.5 | 2020-12-16 | AdRem NetCrunch 10.6.0.4587 has a Server-Side Request Forgery (SSRF) vulnerability in the NetCrunch server. Every user can trick the server into performing SMB… |
CVE-2020-26258 | Medium | 6.3 | 2020-12-16 | XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.15, a Server-Side Forgery Request vulnerability can be acti… |
CVE-2020-10770 | Medium | 5.3 | 2020-12-15 | A flaw was found in Keycloak before 13.0.0, where it is possible to force the server to call out an unverified URL using the OIDC parameter request_uri. This f… |
CVE-2020-17513 | Medium | 5.3 | 2020-12-14 | In Apache Airflow versions prior to 1.10.13, the Charts and Query View of the old (Flask-admin based) UI were vulnerable for SSRF attack. |
CVE-2020-24444 | Medium | 5.8 | 2020-12-10 | AEM Forms SP6 add-on for AEM 6.5.6.0 and Forms add-on package for AEM 6.4 Service Pack 8 Cumulative Fix Pack 2 (6.4.8.2) have a blind Server-Side Request Forge… |
CVE-2020-28978 | Medium | 5.3 | 2020-11-30 | The Canto plugin 1.3.0 for WordPress contains blind SSRF vulnerability. It allows an unauthenticated attacker can make a request to any internal and external s… |
CVE-2020-28977 | Medium | 5.3 | 2020-11-30 | The Canto plugin 1.3.0 for WordPress contains blind SSRF vulnerability. It allows an unauthenticated attacker can make a request to any internal and external s… |
CVE-2020-28976 | Medium | 5.3 | 2020-11-30 | The Canto plugin 1.3.0 for WordPress contains a blind SSRF vulnerability. It allows an unauthenticated attacker can make a request to any internal and external… |
CVE-2020-24815 | Medium | 6.5 | 2020-11-24 | A Server-Side Request Forgery (SSRF) affecting the PDF generation in MicroStrategy 10.4, 2019 before Update 6, and 2020 before Update 2 allows authenticated us… |
CVE-2020-28360 | Critical | 9.8 | 2020-11-23 | Insufficient RegEx in private-ip npm package v1.0.5 and below insufficiently filters reserved IP ranges resulting in indeterminate SSRF. An attacker can perfor… |
CVE-2020-27626 | Medium | 5.3 | 2020-11-16 | JetBrains YouTrack before 2020.3.5333 was vulnerable to SSRF. |
CVE-2020-27624 | Medium | 5.3 | 2020-11-16 | JetBrains YouTrack before 2020.3.888 was vulnerable to SSRF. |
CVE-2019-17566 | High | 7.5 | 2020-11-12 | Apache Batik is vulnerable to server-side request forgery, caused by improper input validation by the "xlink:href" attributes. By using a specially-crafted arg… |
CVE-2020-7329 | High | 7.2 | 2020-11-11 | Server-side request forgery vulnerability in the ePO extension in McAfee MVISION Endpoint prior to 20.11 allows remote attackers trigger server-side DNS reques… |
CVE-2020-7328 | High | 7.2 | 2020-11-11 | External entity attack vulnerability in the ePO extension in McAfee MVISION Endpoint prior to 20.11 allows remote attackers to gain control of a resource or tr… |
CVE-2020-24063 | High | 7.2 | 2020-11-10 | The Canto plugin 1.3.0 for WordPress allows includes/lib/download.php?subdomain= SSRF. |
CVE-2020-26815 | High | 8.6 | 2020-11-10 | SAP Fiori Launchpad (News tile Application), versions - 750,751,752,753,754,755, allows an unauthorized attacker to send a crafted request to a vulnerable web… |
CVE-2020-26811 | Medium | 5.3 | 2020-11-10 | SAP Commerce Cloud (Accelerator Payment Mock), versions - 1808, 1811, 1905, 2005, allows an unauthenticated attacker to submit a crafted request over a network… |
CVE-2020-27018 | Medium | 5.5 | 2020-11-09 | Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 is vulnerable to a server side request forgery vulnerability which could allow an authen… |
CVE-2020-15297 | High | 7.1 | 2020-11-09 | Insufficient validation in the Bitdefender Update Server and BEST Relay components of Bitdefender Endpoint Security Tools versions prior to 6.6.20.294 allows a… |
CVE-2020-28168 | Medium | 5.9 | 2020-11-06 | Axios NPM package 0.21.0 contains a Server-Side Request Forgery (SSRF) vulnerability where an attacker is able to bypass a proxy by providing a URL that respon… |
CVE-2020-28043 | High | 7.5 | 2020-11-02 | MISP through 2.4.133 allows SSRF in the REST client via the use_full_path parameter with an arbitrary URL. |
CVE-2020-24881 | Critical | 9.8 | 2020-11-02 | SSRF exists in osTicket before 1.14.3, where an attacker can add malicious file to server or perform port scanning. |
CVE-2020-24710 | Medium | 5.3 | 2020-10-28 | Gophish before 0.11.0 allows SSRF attacks. |
CVE-2020-7126 | Medium | 5.8 | 2020-10-26 | A remote server-side request forgery (ssrf) vulnerability was discovered in Aruba Airwave Software version(s): Prior to 1.3.2. |
CVE-2020-25466 | Critical | 9.8 | 2020-10-23 | A SSRF vulnerability exists in the downloadimage interface of CRMEB 3.0, which can remotely download arbitrary files on the server and remotely execute arbitra… |
CVE-2020-15002 | Medium | 5.0 | 2020-10-23 | OX App Suite through 7.10.3 allows SSRF via the the /ajax/messaging/message message API. |
CVE-2020-25820 | Medium | 6.5 | 2020-10-21 | BigBlueButton before 2.2.7 allows remote authenticated users to read local files and conduct SSRF attacks via an uploaded Office document that has a crafted UR… |
CVE-2020-6308 | Medium | 5.3 | 2020-10-20 | SAP BusinessObjects Business Intelligence Platform (Web Services) versions - 410, 420, 430, allows an unauthenticated attacker to inject arbitrary values as CM… |
CVE-2020-15822 | High | 7.3 | 2020-10-19 | In JetBrains YouTrack before 2020.2.10514, SSRF is possible because URL filtering can be escaped. |
CVE-2020-27197 | Critical | 9.8 | 2020-10-17 | TAXII libtaxii through 1.1.117, as used in EclecticIQ OpenTAXII through 0.2.0 and other products, allows SSRF via an initial http:// substring to the parse met… |
CVE-2020-26948 | Critical | 9.8 | 2020-10-10 | Emby Server before 4.5.0 allows SSRF via the Items/RemoteSearch/Image ImageURL parameter. |
CVE-2020-7740 | High | 8.2 | 2020-10-06 | This affects all versions of package node-pdf-generator. Due to lack of user input validation and sanitization done to the content given to node-pdf-generator… |
CVE-2020-7739 | High | 8.2 | 2020-10-06 | This affects all versions of package phantomjs-seo. It is possible for an attacker to craft a url that will be passed to a PhantomJS instance allowing for an S… |
CVE-2020-5784 | Medium | 6.5 | 2020-10-01 | Server-Side Request Forgery in Teltonika firmware TRB2_R_00.02.04.3 allows a low privileged user to cause the application to perform HTTP GET requests to arbit… |
CVE-2020-24570 | Medium | 6.5 | 2020-09-30 | An issue was discovered in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 through 2.6.1. There is a CSRF issue (with resultant SSRF) in the com_mb24proxy module… |
CVE-2020-15594 | Medium | 4.3 | 2020-09-30 | An SSRF issue was discovered in Zoho Application Control Plus before version 10.0.511. The mail gateway configuration feature allows an attacker to perform a s… |
CVE-2020-14023 | Medium | 4.9 | 2020-09-22 | Ozeki NG SMS Gateway through 4.17.6 allows SSRF via SMS WCF or RSS To SMS. |
CVE-2020-16171 | Medium | 6.5 | 2020-09-21 | An issue was discovered in Acronis Cyber Backup before 12.5 Build 16342. Some API endpoints on port 9877 under /api/ams/ accept an additional custom Shard head… |
CVE-2020-15772 | Medium | 4.9 | 2020-09-18 | An issue was discovered in Gradle Enterprise 2018.5 - 2020.2.4. When configuring Gradle Enterprise to integrate with a SAML identity provider, an XML metadata… |
CVE-2020-13309 | Medium | 5.4 | 2020-09-14 | A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. GitLab was vulnerable to a blind SSRF attack through the repository mirror… |
CVE-2020-4632 | Medium | 6.5 | 2020-09-04 | IBM InfoSphere Metadata Asset Manager 11.7 is vulnerable to server-side request forgery. By sending a specially crafted request, a remote authenticated attacke… |
CVE-2020-12644 | Medium | 5.0 | 2020-08-31 | OX App Suite 7.10.3 and earlier allows SSRF, related to the mail account API and the /folder/list API. |
CVE-2020-24898 | High | 7.6 | 2020-08-29 | The Table Filter and Charts for Confluence Server app before 5.3.26 (for Atlassian Confluence) allows SSRF via the "Table from CSV" macro (URL parameter). |
CVE-2020-9298 | High | 7.5 | 2020-08-28 | The Spinnaker template resolution functionality is vulnerable to Server-Side Request Forgery (SSRF), which allows an attacker to send requests on behalf of Spi… |
CVE-2020-24548 | Medium | 5.3 | 2020-08-26 | Ericom Access Server 9.2.0 (for AccessNow and Ericom Blaze) allows SSRF to make outbound WebSocket connection requests on arbitrary TCP ports, and provides "Ca… |
CVE-2020-17386 | Medium | 6.5 | 2020-08-25 | Cellopoint CelloOS v4.1.10 Build 20190922 does not validate URL inputted properly. With cookie of an authenticated user, attackers can temper with the URL para… |
CVE-2020-14044 | High | 7.2 | 2020-08-24 | ** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** A Server-Side Request Forgery (SSRF) vulnerability was found in Codiad v1.7.8 and later. A user with admin privileges… |
CVE-2020-5775 | Medium | 5.8 | 2020-08-21 | Server-Side Request Forgery in Canvas LMS 2020-07-29 allows a remote, unauthenticated attacker to cause the Canvas application to perform HTTP GET requests to… |
CVE-2020-15152 | Critical | 9.1 | 2020-08-17 | ftp-srv is an npm package which is a modern and extensible FTP server designed to be simple yet configurable. In ftp-srv before versions 2.19.6, 3.1.2, and 4.3… |
CVE-2020-8226 | Medium | 5.8 | 2020-08-17 | A vulnerability exists in phpBB <v3.2.10 and <v3.3.1 which allowed remote image dimensions check to be used to SSRF. |
CVE-2020-13286 | Medium | 6.4 | 2020-08-13 | For GitLab before 13.0.12, 13.1.6, 13.2.3 user controlled git configuration settings can be modified to result in Server Side Request Forgery. |
CVE-2020-14296 | High | 7.1 | 2020-08-11 | Red Hat CloudForms 4.7 and 5 was vulnerable to Server-Side Request Forgery (SSRF) flaw. With the access to add Ansible Tower provider, an attacker could scan a… |
CVE-2020-13295 | Medium | 5.4 | 2020-08-10 | For GitLab Runner before 13.0.12, 13.1.6, 13.2.3, by replacing dockerd with a malicious server, the Shared Runner is susceptible to SSRF. |
CVE-2020-16248 | Medium | 5.8 | 2020-08-09 | Prometheus Blackbox Exporter through 0.17.0 allows /probe?target= SSRF. NOTE: follow-on discussion suggests that this might plausibly be interpreted as both in… |
CVE-2020-15823 | High | 7.5 | 2020-08-08 | JetBrains YouTrack before 2020.2.8873 is vulnerable to SSRF in the Workflow component. |
CVE-2020-15819 | Medium | 5.3 | 2020-08-08 | JetBrains YouTrack before 2020.2.10643 was vulnerable to SSRF that allowed scanning internal ports. |
CVE-2020-13970 | High | 8.8 | 2020-07-28 | Shopware before 6.2.3 is vulnerable to a Server-Side Request Forgery (SSRF) in its "Mediabrowser upload by URL" feature. This allows an authenticated user to s… |
CVE-2020-15879 | High | 7.5 | 2020-07-21 | Bitwarden Server 1.35.1 allows SSRF because it does not consider certain IPv6 addresses (ones beginning with fc, fd, fe, or ff, and the :: address) and certain… |
CVE-2020-8205 | High | 7.5 | 2020-07-20 | The uppy npm package < 1.13.2 and < 2.0.0-alpha.5 is vulnerable to a Server-Side Request Forgery (SSRF) vulnerability, which allows an attacker to scan local o… |
CVE-2020-13788 | Medium | 4.3 | 2020-07-15 | Harbor prior to 2.0.1 allows SSRF with this limitation: an attacker with the ability to edit projects can scan ports of hosts accessible on the Harbor server's… |
CVE-2020-6282 | Medium | 5.8 | 2020-07-14 | SAP NetWeaver AS JAVA (IIOP service) (SERVERCORE), versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, and SAP NetWeaver AS JAVA (IIOP service) (CORE-TOOLS), ve… |
CVE-2020-14170 | Medium | 4.3 | 2020-07-09 | Webhooks in Atlassian Bitbucket Server from version 5.4.0 before version 7.3.1 allow remote attackers to access the content of internal network resources via a… |