CWE-918 · Server-Side Request Forgery (SSRF) (page 30)
Page 30 of 32 — CVEs classified under CWE-918, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-14056 | Critical | 9.8 | 2020-07-01 | Monsta FTP 2.10.1 or below is prone to a server-side request forgery vulnerability due to insufficient restriction of the web fetch functionality. This allows… |
CVE-2019-20408 | Medium | 5.3 | 2020-07-01 | The /plugins/servlet/gadgets/makeRequest resource in Jira before version 8.7.0 allows remote attackers to access the content of internal network resources via… |
CVE-2020-13484 | Critical | 9.8 | 2020-06-24 | Bitrix24 through 20.0.975 allows SSRF via an intranet IP address in the services/main/ajax.php?action=attachUrlPreview url parameter, if the destination URL ho… |
CVE-2019-20872 | Medium | 5.5 | 2020-06-19 | An issue was discovered in Mattermost Server before 5.9.0, 5.8.1, 5.7.3, and 4.10.8. SSRF can attack local services. |
CVE-2020-8544 | Medium | 6.5 | 2020-06-16 | OX App Suite through 7.10.3 allows SSRF. |
CVE-2020-13650 | High | 7.5 | 2020-06-15 | An issue was discovered in DigDash 2018R2 before p20200210 and 2019R1 before p20200210. The login page is vulnerable to Server-Side Request Forgery (SSRF) that… |
CVE-2020-9427 | Medium | 5.0 | 2020-06-15 | OX Guard 2.10.3 and earlier allows SSRF. |
CVE-2020-11980 | Medium | 6.3 | 2020-06-12 | In Karaf, JMX authentication takes place using JAAS and authorization takes place using ACL files. By default, only an "admin" can actually invoke on an MBean… |
CVE-2020-9645 | High | 7.5 | 2020-06-12 | Adobe Experience Manager versions 6.5 and earlier have a blind server-side request forgery (ssrf) vulnerability. Successful exploitation could lead to sensitiv… |
CVE-2020-9643 | High | 7.5 | 2020-06-12 | Adobe Experience Manager versions 6.5 and earlier have a server-side request forgery (ssrf) vulnerability. Successful exploitation could lead to sensitive info… |
CVE-2020-12725 | High | 7.2 | 2020-06-11 | Havoc Research discovered an authenticated Server-Side Request Forgery (SSRF) via the "JSON" data source of Redash open-source 8.0.0 and prior. Possibly, other… |
CVE-2020-4101 | Critical | 9.8 | 2020-06-11 | "HCL Digital Experience is susceptible to Server Side Request Forgery." |
CVE-2020-6275 | Critical | 9.8 | 2020-06-10 | SAP Netweaver AS ABAP, versions 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 752, 753, 754, are vulnerable for Server Side Request Forgery Attack where in… |
CVE-2020-4529 | High | 7.4 | 2020-06-08 | IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to server side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized… |
CVE-2020-8555 | Medium | 6.3 | 2020-06-05 | The Kubernetes kube-controller-manager in versions v1.0-1.14, versions prior to v1.15.12, v1.16.9, v1.17.5, and version v1.18.0 are vulnerable to a Server Side… |
CVE-2020-13379 | High | 8.2 | 2020-06-03 | The avatar feature in Grafana 3.0.1 through 7.0.1 has an SSRF Incorrect Access Control issue. This vulnerability allows any unauthenticated user/client to make… |
CVE-2014-8943 | High | 8.8 | 2020-06-01 | Lexiglot through 2014-11-20 allows SSRF via the admin.php?page=projects svn_url parameter. |
CVE-2020-13226 | Critical | 9.8 | 2020-05-20 | WSO2 API Manager 3.0.0 does not properly restrict outbound network access from a Publisher node, opening up the possibility of SSRF to this node's entire intra… |
CVE-2020-4365 | Medium | 4.3 | 2020-05-14 | IBM WebSphere Application Server 8.5 is vulnerable to server-side request forgery. By sending a specially crafted request, a remote authenticated attacker coul… |
CVE-2020-8830 | High | 8.8 | 2020-05-05 | CSRF in login.asp on Ruckus devices allows an attacker to access the panel, and use SSRF to perform scraping or other analysis via the SUBCA-1 field on the Wir… |
CVE-2020-5562 | Medium | 4.9 | 2020-04-28 | Server-side request forgery (SSRF) vulnerability in Cybozu Garoon 4.6.0 to 4.6.3 allows a remote attacker with an administrative privilege to issue arbitrary H… |
CVE-2020-11885 | High | 7.2 | 2020-04-17 | WSO2 Enterprise Integrator through 6.6.0 has an XXE vulnerability where a user (with admin console access) can use the XML validator to make unintended network… |
CVE-2020-4294 | Medium | 6.3 | 2020-04-15 | IBM QRadar 7.3.0 to 7.3.3 Patch 2 is vulnerable to Server Side Request Forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests f… |
CVE-2020-10980 | Critical | 9.8 | 2020-04-08 | GitLab EE/CE 8.0.rc1 to 12.9 is vulnerable to a blind SSRF in the FogBugz integration. |
CVE-2020-11453 | Medium | 5.3 | 2020-04-02 | Microstrategy Web 10.4 is vulnerable to Server-Side Request Forgery in the Test Web Service functionality exposed through the path /MicroStrategyWS/. The funct… |
CVE-2020-11452 | Medium | 4.3 | 2020-04-02 | Microstrategy Web 10.4 includes functionality to allow users to import files or data from external resources such as URLs or databases. By providing an externa… |
CVE-2020-10956 | Critical | 9.8 | 2020-03-27 | GitLab 8.10 and later through 12.9 is vulnerable to an SSRF in a project import note feature. |
CVE-2020-3769 | High | 7.5 | 2020-03-25 | Adobe Experience Manager versions 6.5 and earlier have a server-side request forgery (ssrf) vulnerability. Successful exploitation could lead to sensitive info… |
CVE-2020-10791 | Medium | 6.5 | 2020-03-25 | app/Plugin/GrafanaModule/Controller/GrafanaConfigurationController.php in openITCOCKPIT before 3.7.3 allows remote authenticated users to trigger outbound TCP… |
CVE-2019-11574 | Critical | 9.8 | 2020-03-20 | An issue was discovered in Simple Machines Forum (SMF) before release 2.0.17. There is SSRF related to Subs-Package.php and Subs.php because user-supplied data… |
CVE-2020-8138 | Medium | 6.5 | 2020-03-20 | A missing check for IPv4 nested inside IPv6 in Nextcloud server < 17.0.1, < 16.0.7, and < 15.0.14 allowed a Server-Side Request Forgery (SSRF) vulnerability wh… |
CVE-2020-8135 | Critical | 9.8 | 2020-03-20 | The uppy npm package < 1.9.3 is vulnerable to a Server-Side Request Forgery (SSRF) vulnerability, which allows an attacker to scan local or external network or… |
CVE-2020-8134 | High | 8.1 | 2020-03-20 | Server-side request forgery (SSRF) vulnerability in Ghost CMS < 3.10.0 allows an attacker to scan local or external network or otherwise interact with internal… |
CVE-2020-10077 | Critical | 9.8 | 2020-03-13 | GitLab EE 3.0 through 12.8.1 allows SSRF. An internal investigation revealed that a particular deprecated service was creating a server side request forgery ri… |
CVE-2020-8540 | Critical | 9.8 | 2020-03-11 | An XML external entity (XXE) vulnerability in Zoho ManageEngine Desktop Central before the 07-Mar-2020 update allows remote unauthenticated users to read arbit… |
CVE-2019-13121 | High | 7.5 | 2020-03-10 | An issue was discovered in GitLab Enterprise Edition 10.6 through 12.0.2. The GitHub project integration was vulnerable to an SSRF vulnerability which allowed… |
CVE-2019-12443 | Critical | 9.8 | 2020-03-10 | An issue was discovered in GitLab Community and Enterprise Edition 10.2 through 11.11. Multiple features contained Server-Side Request Forgery (SSRF) vulnerabi… |
CVE-2020-10212 | Critical | 9.8 | 2020-03-07 | upload.php in Responsive FileManager 9.13.4 and 9.14.0 allows SSRF via the url parameter because file-extension blocking is mishandled and because it is possib… |
CVE-2019-18846 | Medium | 5.0 | 2020-02-21 | OX App Suite through 7.10.2 allows SSRF. |
CVE-2020-7796 | Critical | 9.8 | 2020-02-18 | Zimbra Collaboration Suite (ZCS) before 8.8.15 Patch 7 allows SSRF when WebEx zimlet is installed and zimlet JSP is enabled. |
CVE-2019-20474 | Medium | 4.3 | 2020-02-17 | An issue was discovered in Zoho ManageEngine Remote Access Plus 10.0.447. The service to test the mail-server configuration suffers from an authorization issue… |
CVE-2020-8128 | Critical | 9.8 | 2020-02-14 | An unintended require and server-side request forgery vulnerabilities in jsreport version 2.5.0 and earlier allow attackers to execute arbitrary code. |
CVE-2019-4741 | Medium | 5.3 | 2020-02-12 | IBM Content Navigator 3.0CD is vulnerable to Server Side Request Forgery (SSRF). This may allow an unauthenticated attacker to send unauthorized requests from… |
CVE-2020-8118 | Medium | 5.0 | 2020-02-04 | An authenticated server-side request forgery in Nextcloud server 16.0.1 allowed to detect local and remote services when adding a new subscription in the calen… |
CVE-2020-3938 | Critical | 9.8 | 2020-02-04 | SysJust Syuan-Gu-Da-Shih, versions before 20191223, contain vulnerability of Request Forgery, allowing attackers to launch inquiries into network architecture… |
CVE-2013-4864 | Critical | 9.8 | 2020-01-28 | MiCasaVerde VeraLite with firmware 1.5.408 allows remote attackers to send HTTP requests to intranet servers via the url parameter to cgi-bin/cmh/proxy.sh, rel… |
CVE-2019-5464 | Critical | 9.8 | 2020-01-28 | A flawed DNS rebinding protection issue was discovered in GitLab CE/EE 10.2 and later in the `url_blocker.rb` which could result in SSRF where the library is u… |
CVE-2007-6758 | High | 7.5 | 2020-01-23 | Server-side request forgery (SSRF) vulnerability in feed-proxy.php in extjs 5.0.0. |
CVE-2019-19835 | High | 7.5 | 2020-01-23 | SSRF in AjaxRestrictedCmdStat in zap in Ruckus Wireless Unleashed through 200.7.10.102.64 allows a remote denial of service via the server attribute to the too… |
CVE-2020-1925 | High | 7.5 | 2020-01-09 | Apache Olingo versions 4.0.0 to 4.7.0 provide the AsyncRequestWrapperImpl class which reads a URL from the Location header, and then sends a GET or DELETE requ… |
CVE-2019-19261 | High | 8.8 | 2020-01-03 | GitLab Enterprise Edition (EE) 6.7 and later through 12.5 allows SSRF. |
CVE-2018-20499 | High | 7.2 | 2019-12-30 | An issue was discovered in GitLab Community and Enterprise Edition before 11.x before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. It allows SSRF. |
CVE-2018-20497 | Medium | 5.0 | 2019-12-30 | An issue was discovered in GitLab Community and Enterprise Edition before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. It allows SSRF. |
CVE-2019-20055 | Medium | 6.5 | 2019-12-29 | LuquidPixels LiquiFire OS 4.8.0 allows SSRF via the call%3Durl substring followed by a URL in square brackets. |
CVE-2019-19999 | High | 7.2 | 2019-12-26 | Halo before 1.2.0-beta.1 allows Server Side Template Injection (SSTI) because TemplateClassResolver.SAFER_RESOLVER is not used in the FreeMarker configuration. |
CVE-2019-18379 | High | 7.3 | 2019-12-11 | Symantec Messaging Gateway, prior to 10.7.3, may be susceptible to a server-side request forgery (SSRF) exploit, which is a type of issue that can let an attac… |
CVE-2019-16948 | Critical | 9.8 | 2019-11-13 | An SSRF issue was discovered in Enghouse Web Chat 6.1.300.31. In any POST request, one can replace the port number at WebServiceLocation=http://localhost:8085/… |
CVE-2019-8156 | High | 7.2 | 2019-11-06 | A server-side request forgery (SSRF) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user with ad… |
CVE-2019-8151 | High | 7.2 | 2019-11-06 | A remote code execution vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user with admin privilege… |
CVE-2019-18394 | Critical | 9.8 | 2019-10-24 | A Server Side Request Forgery (SSRF) vulnerability in FaviconServlet.java in Ignite Realtime Openfire through 4.4.2 allows attackers to send arbitrary HTTP GET… |
CVE-2019-18355 | Critical | 9.8 | 2019-10-23 | An SSRF issue was discovered in the legacy Web launcher in Thycotic Secret Server before 10.7. |
CVE-2019-17400 | High | 7.5 | 2019-10-21 | The unoconv package before 0.9 mishandles untrusted pathnames, leading to SSRF and local file inclusion. |
CVE-2019-17670 | Critical | 9.8 | 2019-10-17 | WordPress before 5.2.4 has a Server Side Request Forgery (SSRF) vulnerability because Windows paths are mishandled during certain validation of relative URLs. |
CVE-2019-17669 | Critical | 9.8 | 2019-10-17 | WordPress before 5.2.4 has a Server Side Request Forgery (SSRF) vulnerability because URL validation does not consider the interpretation of a name as a series… |
CVE-2019-14225 | Medium | 5.4 | 2019-10-14 | OX App Suite 7.10.1 and 7.10.2 allows SSRF. |
CVE-2017-18638 | High | 7.5 | 2019-10-11 | send_email in graphite-web/webapp/graphite/composer/views.py in Graphite through 1.1.5 is vulnerable to SSRF. The vulnerable SSRF endpoint can be used by an at… |
CVE-2019-15021 | Medium | 5.3 | 2019-10-09 | A security vulnerability exists in the Zingbox Inspector versions 1.294 and earlier, that can allow an attacker to easily identify instances of Zingbox Inspect… |
CVE-2019-15164 | Medium | 5.3 | 2019-10-03 | rpcapd/daemon.c in libpcap before 1.9.1 allows SSRF because a URL may be provided as a capture source. |
CVE-2019-13335 | Critical | 9.8 | 2019-10-02 | SalesAgility SuiteCRM 7.10.x 7.10.19 and 7.11.x before and 7.11.7 has SSRF. |
CVE-2019-16932 | Critical | 10.0 | 2019-09-30 | A blind SSRF vulnerability exists in the Visualizer plugin before 3.3.1 for WordPress via wp-json/visualizer/v1/upload-data. |
CVE-2019-4262 | Medium | 5.3 | 2019-09-26 | IBM QRadar SIEM 7.2 and 7.3 is vulnerable to Server Side Request Forgery (SSRF). This may allow an unauthenticated attacker to send unauthorized requests from… |
CVE-2019-15033 | High | 7.7 | 2019-09-19 | Pydio 6.0.8 allows Authenticated SSRF during a Remote Link Feature download. An attacker can specify an intranet address in the file parameter to index.php, wh… |
CVE-2019-6837 | Critical | 9.1 | 2019-09-17 | A Server-Side Request Forgery (SSRF): CWE-918 vulnerability exists in U.motion Server (MEG6501-0001 - U.motion KNX server, MEG6501-0002 - U.motion KNX Server P… |
CVE-2019-15731 | Medium | 5.3 | 2019-09-16 | An issue was discovered in GitLab Community and Enterprise Edition 12.0 through 12.2.1. Non-members were able to comment on merge requests despite the reposito… |
CVE-2019-15730 | High | 7.5 | 2019-09-16 | An issue was discovered in GitLab Community and Enterprise Edition 8.14 through 12.2.1. The Jira integration contains a SSRF vulnerability as a result of a byp… |
CVE-2019-15728 | High | 7.5 | 2019-09-16 | An issue was discovered in GitLab Community and Enterprise Edition 10.1 through 12.2.1. Protections against SSRF attacks on the Kubernetes integration are insu… |
CVE-2019-8451 | Medium | 6.5 | 2019-09-11 | The /plugins/servlet/gadgets/makeRequest resource in Jira before version 8.4.0 allows remote attackers to access the content of internal network resources via… |
CVE-2019-12996 | Medium | 5.3 | 2019-09-10 | In Mendix 7.23.5 and earlier, issue in XML import mappings allow DOCTYPE declarations in the XML input that is potentially unsafe. |
CVE-2019-6793 | High | 7.0 | 2019-09-09 | An issue was discovered in GitLab Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. The Jira integration feature is vulnerable… |
CVE-2019-12633 | High | 7.5 | 2019-09-05 | A vulnerability in Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to bypass access controls and conduct a s… |
CVE-2019-12632 | High | 7.5 | 2019-09-05 | A vulnerability in Cisco Finesse could allow an unauthenticated, remote attacker to bypass access controls and conduct a server-side request forgery (SSRF) att… |
CVE-2019-13020 | Critical | 10.0 | 2019-08-26 | The fetch API in Tightrope Media Carousel before 7.1.3 has CarouselAPI/v0/fetch?url= SSRF. This has two potential areas for abuse. First, a specially crafted U… |
CVE-2019-15494 | Critical | 9.8 | 2019-08-23 | openITCOCKPIT before 3.7.1 allows SSRF, aka RVID 5-445b21. |
CVE-2016-10927 | Critical | 10.0 | 2019-08-22 | The nelio-ab-testing plugin before 4.5.11 for WordPress has SSRF in ajax/iesupport.php. |
CVE-2016-10926 | Critical | 10.0 | 2019-08-22 | The nelio-ab-testing plugin before 4.5.9 for WordPress has SSRF in ajax/iesupport.php. |
CVE-2019-11897 | High | 8.6 | 2019-08-21 | A Server-Side Request Forgery (SSRF) vulnerability in the backup & restore functionality in earlier versions than ProSyst mBS SDK 8.2.6 and Bosch IoT Gateway S… |
CVE-2019-0345 | Critical | 9.8 | 2019-08-14 | A remote unauthenticated attacker can abuse a web service in SAP NetWeaver Application Server for Java (Administrator System Overview), versions 7.30, 7.31, 7… |
CVE-2019-12994 | Critical | 9.1 | 2019-08-08 | Server Side Request Forgery (SSRF) exists in Zoho ManageEngine AssetExplorer version 6.2.0 for the AJaxServlet servlet via a parameter in a URL. |
CVE-2019-12959 | High | 8.8 | 2019-08-08 | Server Side Request Forgery (SSRF) exists in Zoho ManageEngine AssetExplorer 6.2.0 and before for the ClientUtilServlet servlet via a URL in a parameter. |
CVE-2019-14255 | Critical | 9.8 | 2019-08-08 | A Server Side Request Forgery (SSRF) vulnerability in go-camo up to version 1.1.4 allows a remote attacker to perform HTTP requests to internal endpoints. |
CVE-2019-14704 | Critical | 9.8 | 2019-08-06 | An SSRF issue was discovered in HTTPD on MicroDigital N-series cameras with firmware through 6400.0.8.5 via FTP commands following a newline character in the u… |
CVE-2019-7923 | High | 7.2 | 2019-08-02 | A server-side request forgery (SSRF) vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This can be e… |
CVE-2019-7913 | High | 7.2 | 2019-08-02 | A server-side request forgery (SSRF) vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This can be e… |
CVE-2019-7911 | High | 7.2 | 2019-08-02 | A server-side request forgery (SSRF) vulnerability exists in Magento Open Source prior to 1.9.4.2, and Magento Commerce prior to 1.14.4.2, Magento 2.1 prior to… |
CVE-2019-7892 | High | 7.2 | 2019-08-02 | A remote code execution vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. An authenticated user with… |
CVE-2019-7616 | Medium | 4.9 | 2019-07-30 | Kibana versions before 6.8.2 and 7.2.1 contain a server side request forgery (SSRF) flaw in the graphite integration for Timelion visualizer. An attacker with… |
CVE-2018-19571 | High | 7.7 | 2019-07-10 | GitLab CE/EE, versions 8.18 up to 11.x before 11.3.11, 11.4 before 11.4.8, and 11.5 before 11.5.1, are vulnerable to an SSRF vulnerability in webhooks. |
CVE-2018-19495 | Medium | 6.5 | 2019-07-10 | An issue was discovered in GitLab Community and Enterprise Edition before 11.3.11, 11.4.x before 11.4.8, and 11.5.x before 11.5.1. There is an SSRF vulnerabili… |
CVE-2019-9827 | Critical | 9.8 | 2019-07-03 | Hawt Hawtio through 2.5.0 is vulnerable to SSRF, allowing a remote attacker to trigger an HTTP request from an affected server to an arbitrary host via the ini… |
CVE-2019-12852 | Critical | 9.8 | 2019-07-03 | An SSRF attack was possible on a JetBrains YouTrack server. The issue (1 of 2) was fixed in JetBrains YouTrack 2018.4.49168. |