CWE-918 · Server-Side Request Forgery (SSRF) (page 32)
Page 32 of 32 — CVEs classified under CWE-918, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-7516 | High | 7.3 | 2018-03-22 | A server-side request forgery vulnerability has been identified in Geutebruck G-Cam/EFD-2250 Version 1.12.0.4 and Topline TopFD-2125 Version 3.15.1 IP cameras… |
CVE-2014-3990 | Critical | 9.8 | 2018-03-20 | The Cart::getProducts method in system/library/cart.php in OpenCart 1.5.6.4 and earlier allows remote attackers to conduct server-side request forgery (SSRF) a… |
CVE-2018-1000124 | Critical | 10.0 | 2018-03-13 | I Librarian I-librarian version 4.8 and earlier contains a XML External Entity (XXE) vulnerability in line 154 of importmetadata.php(simplexml_load_string) tha… |
CVE-2018-7667 | Critical | 9.8 | 2018-03-05 | Adminer through 4.3.1 has SSRF via the server parameter. |
CVE-2018-1000067 | Medium | 5.3 | 2018-02-16 | An improper authorization vulnerability exists in Jenkins versions 2.106 and earlier, and LTS 2.89.3 and earlier, that allows an attacker to have Jenkins submi… |
CVE-2018-7055 | High | 7.5 | 2018-02-15 | GroupViewProxyServlet in RoomWizard before 4.4.x allows SSRF via the url parameter. |
CVE-2018-2370 | Medium | 5.3 | 2018-02-14 | Server Side Request Forgery (SSRF) vulnerability in SAP Central Management Console, BI Launchpad and Fiori BI Launchpad, 4.10, from 4.20, from 4.30, could allo… |
CVE-2018-1000056 | High | 8.3 | 2018-02-09 | Jenkins JUnit Plugin 1.23 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permissions… |
CVE-2018-1000055 | High | 8.3 | 2018-02-09 | Jenkins Android Lint Plugin 2.5 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permi… |
CVE-2018-1000054 | High | 8.3 | 2018-02-09 | Jenkins CCM Plugin 3.1 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permissions in… |
CVE-2017-6201 | High | 8.1 | 2018-02-06 | A Server Side Request Forgery vulnerability exists in the install app process in Sandstorm before build 0.203. A remote attacker may exploit this issue by prov… |
CVE-2017-18036 | Medium | 4.3 | 2018-02-02 | The Github repository importer in Atlassian Bitbucket Server before version 5.3.0 allows remote attackers to determine if a service they could not otherwise re… |
CVE-2018-6186 | High | 8.8 | 2018-02-01 | Citrix NetScaler VPX through NS12.0 53.13.nc allows an SSRF attack via the /rapi/read_url URI by an authenticated attacker who has a webapp account. The attack… |
CVE-2018-6029 | High | 7.5 | 2018-01-23 | The copy function in application/admin/controller/Article.php in NoneCms 1.3.0 allows remote attackers to access the content of internal and external network r… |
CVE-2018-1042 | Medium | 6.5 | 2018-01-22 | Moodle 3.x has Server Side Request Forgery in the filepicker. |
CVE-2017-16865 | Medium | 5.3 | 2018-01-17 | The Trello importer in Atlassian Jira before version 7.6.1 allows remote attackers to access the content of internal network resources via a Server Side Reques… |
CVE-2017-1000419 | High | 7.5 | 2018-01-02 | phpBB version 3.2.0 is vulnerable to SSRF in the Remote Avatar function resulting allowing an attacker to perform port scanning, requesting internal content an… |
CVE-2017-15886 | Medium | 6.5 | 2017-12-28 | Server-side request forgery (SSRF) vulnerability in Link Preview in Synology Chat before 2.0.0-1124 allows remote authenticated users to download arbitrary loc… |
CVE-2017-17697 | High | 8.6 | 2017-12-15 | The Ping() function in ui/api/target.go in Harbor through 1.3.0-rc4 has SSRF via the endpoint parameter to /api/targets/ping. |
CVE-2017-16678 | Medium | 4.7 | 2017-12-12 | Server Side Request Forgery (SSRF) vulnerability in SAP NetWeaver Knowledge Management Configuration Service, EPBC and EPBC2 from 7.00 to 7.02; KMC-BC 7.30, 7… |
CVE-2017-15943 | Medium | 5.3 | 2017-12-11 | The configuration file import for applications, spyware and vulnerability objects functionality in the web interface in Palo Alto Networks PAN-OS before 6.1.19… |
CVE-2017-11291 | Critical | 10.0 | 2017-12-09 | An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A Server-Side Request Forgery (SSRF) vulnerability exists that could be abused to bypass n… |
CVE-2017-14585 | High | 7.2 | 2017-11-27 | A Server Side Request Forgery (SSRF) vulnerability could lead to remote code execution for authenticated administrators. This issue was introduced in version 2… |
CVE-2017-4928 | High | 7.5 | 2017-11-17 | The flash-based vSphere Web Client (6.0 prior to 6.0 U3c and 5.5 prior to 5.5 U3f) i.e. not the new HTML5-based vSphere Client, contains SSRF and CRLF injectio… |
CVE-2017-16870 | High | 8.1 | 2017-11-17 | The UpdraftPlus plugin through 1.13.12 for WordPress has SSRF in the updraft_ajax_handler function in /wp-content/plugins/updraftplus/admin.php via an httpget… |
CVE-2017-1000237 | Critical | 9.8 | 2017-11-17 | I, Librarian version <=4.6 & 4.7 is vulnerable to Server-Side Request Forgery in the ajaxsupplement.php resulting in the attacker being able to reset any user'… |
CVE-2017-0907 | Critical | 9.8 | 2017-11-13 | The Recurly Client .NET Library before 1.0.1, 1.1.10, 1.2.8, 1.3.2, 1.4.14, 1.5.3, 1.6.2, 1.7.1, 1.8.1 is vulnerable to a Server-Side Request Forgery vulnerabi… |
CVE-2017-0906 | Critical | 9.8 | 2017-11-13 | The Recurly Client Python Library before 2.0.5, 2.1.16, 2.2.22, 2.3.1, 2.4.5, 2.5.1, 2.6.2 is vulnerable to a Server-Side Request Forgery vulnerability in the… |
CVE-2017-0905 | Critical | 9.8 | 2017-11-13 | The Recurly Client Ruby Library before 2.0.13, 2.1.11, 2.2.5, 2.3.10, 2.4.11, 2.5.4, 2.6.3, 2.7.8, 2.8.2, 2.9.2, 2.10.4, 2.11.3 is vulnerable to a Server-Side… |
CVE-2017-0889 | Critical | 9.8 | 2017-11-13 | Paperclip ruby gem version 3.1.4 and later suffers from a Server-SIde Request Forgery (SSRF) vulnerability in the Paperclip::UriAdapter class. Attackers may be… |
CVE-2017-1000139 | High | 8.0 | 2017-11-03 | Mahara 1.8 before 1.8.7 and 1.9 before 1.9.5 and 1.10 before 1.10.3 and 15.04 before 15.04.0 are vulnerable to server-side request forgery attacks as not all p… |
CVE-2017-15644 | High | 8.6 | 2017-10-19 | SSRF exists in Webmin 1.850 via the PATH_INFO to tunnel/link.cgi, as demonstrated by a GET request for tunnel/link.cgi/http://INTRANET-IP:8000. |
CVE-2017-7553 | Medium | 6.3 | 2017-09-29 | The external_request api call in App Studio (millicore) allows server side request forgery (SSRF). An attacker could use this flaw to probe the network interna… |
CVE-2017-12905 | Critical | 10.0 | 2017-09-25 | Server Side Request Forgery vulnerability in Vebto Pixie Image Editor 1.4 and 1.7 allows remote attackers to disclose information or execute arbitrary code via… |
CVE-2017-12071 | Medium | 6.5 | 2017-09-08 | Server-side request forgery (SSRF) vulnerability in file_upload.php in Synology Photo Station before 6.7.4-3433 and 6.3-2968 allows remote authenticated users… |
CVE-2017-9458 | Critical | 9.8 | 2017-09-07 | XML external entity (XXE) vulnerability in the GlobalProtect internal and external gateway interface in Palo Alto Networks PAN-OS before 6.1.18, 7.0.x before 7… |
CVE-2017-9506 | Medium | 6.1 | 2017-08-23 | The IconUriServlet of the Atlassian OAuth Plugin from version 1.3.0 before version 1.9.12 and from version 2.0.0 before version 2.0.4 allows remote attackers t… |
CVE-2017-11149 | Medium | 6.5 | 2017-08-14 | Server-side request forgery (SSRF) vulnerability in Downloader in Synology Download Station 3.8.x before 3.8.5-3475 and 3.x before 3.5-2984 allows remote authe… |
CVE-2017-11148 | Medium | 6.5 | 2017-08-11 | Server-side request forgery (SSRF) vulnerability in link preview in Synology Chat before 1.1.0-0806 allows remote authenticated users to access intranet resour… |
CVE-2017-1000017 | High | 8.8 | 2017-07-17 | phpMyAdmin 4.0, 4.4 and 4.6 are vulnerable to a weakness where a user with appropriate permissions is able to connect to an arbitrary MySQL server |
CVE-2017-10973 | Medium | 6.5 | 2017-07-06 | In FineCMS before 2017-07-06, application/lib/ajax/get_image_data.php has SSRF, related to requests for non-image files with a modified HTTP Host header. |
CVE-2017-6036 | Medium | 6.5 | 2017-06-30 | A Server-Side Request Forgery issue was discovered in Belden Hirschmann GECKO Lite Managed switch, Version 2.0.00 and prior versions. The web server receives a… |
CVE-2017-9355 | High | 7.4 | 2017-06-07 | XML external entity (XXE) vulnerability in the import playlist feature in Subsonic 6.1.1 might allow remote attackers to conduct server-side request forgery (S… |
CVE-2017-9307 | Medium | 6.5 | 2017-05-31 | SSRF vulnerability in remotedownload.php in Allen Disk 1.6 allows remote authenticated users to conduct port scans and access intranet servers via a crafted fi… |
CVE-2017-9066 | High | 8.6 | 2017-05-18 | In WordPress before 4.7.5, there is insufficient redirect validation in the HTTP class, leading to SSRF. |
CVE-2017-8794 | Critical | 10.0 | 2017-05-05 | An issue was discovered on Accellion FTA devices before FTA_9_12_180. Because a regular expression (intended to match local https URLs) lacks an initial ^ char… |
CVE-2017-3546 | Medium | 6.5 | 2017-04-24 | Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: MultiChannel Framework). Supported versions that… |
CVE-2015-7570 | High | 7.2 | 2017-04-24 | Multiple server-side request forgery (SSRF) vulnerabilities in Yeager CMS 1.2.1 allow remote attackers to trigger outbound requests and enumerate open ports vi… |
CVE-2016-7051 | High | 8.6 | 2017-04-14 | XmlMapper in the Jackson XML dataformat component (aka jackson-dataformat-xml) before 2.7.8 and 2.8.x before 2.8.4 allows remote attackers to conduct server-si… |
CVE-2017-7569 | High | 8.6 | 2017-04-06 | In vBulletin before 5.3.0, remote attackers can bypass the CVE-2016-6483 patch and conduct SSRF attacks by leveraging the behavior of the PHP parse_url functio… |
CVE-2017-7566 | High | 7.7 | 2017-04-06 | MyBB before 1.8.11 allows remote attackers to bypass an SSRF protection mechanism. |
CVE-2017-6130 | High | 7.4 | 2017-04-06 | F5 SSL Intercept iApp 1.5.0 - 1.5.7 and SSL Orchestrator 2.0 is vulnerable to a Server-Side Request Forgery (SSRF) attack when deployed using the Dynamic Domai… |
CVE-2017-7272 | High | 7.4 | 2017-03-27 | PHP through 7.1.11 enables potential SSRF in applications that accept an fsockopen or pfsockopen hostname argument with an expectation that the port number is… |
CVE-2017-7200 | Medium | 5.8 | 2017-03-21 | An SSRF issue was discovered in OpenStack Glance before Newton. The 'copy_from' feature in the Image Service API v1 allowed an attacker to perform masked netwo… |
CVE-2017-5643 | High | 7.4 | 2017-03-16 | Apache Camel's Validation Component is vulnerable against SSRF via remote DTDs and XXE. |
CVE-2017-5617 | High | 7.4 | 2017-03-16 | The SVG Salamander (aka svgSalamander) library, when used in a web application, allows remote attackers to conduct server-side request forgery (SSRF) attacks v… |
CVE-2015-8813 | High | 8.2 | 2017-03-03 | The Page_Load function in Umbraco.Web/umbraco.presentation/umbraco/dashboard/FeedProxy.aspx.cs in Umbraco before 7.4.0 allows remote attackers to conduct serve… |
CVE-2016-6001 | Low | 3.1 | 2017-02-01 | IBM Forms Experience Builder could be susceptible to a server-side request forgery (SSRF) from the application design interface allowing for some information d… |
CVE-2016-9417 | High | 7.4 | 2017-01-31 | The fetch_remote_file function in MyBB (aka MyBulletinBoard) before 1.8.8 and MyBB Merge System before 1.8.8 allows remote attackers to conduct server-side req… |
CVE-2016-6621 | High | 8.6 | 2017-01-31 | The setup script for phpMyAdmin before 4.0.10.19, 4.4.x before 4.4.15.10, and 4.6.x before 4.6.6 allows remote attackers to conduct server-side request forgery… |
CVE-2016-7999 | High | 7.4 | 2017-01-18 | ecrire/exec/valider_xml.php in SPIP 3.1.2 and earlier allows remote attackers to conduct server side request forgery (SSRF) attacks via a URL in the var_url pa… |
CVE-2017-5518 | High | 7.4 | 2017-01-17 | The media-file upload feature in GeniXCMS through 0.0.8 allows remote attackers to conduct SSRF attacks via a URL, as demonstrated by a URL with an intranet IP… |
CVE-2016-4046 | Medium | 5.8 | 2016-12-15 | An issue was discovered in Open-Xchange OX App Suite before 7.8.1-rev11. The API to configure external mail accounts can be abused to map and access network co… |
CVE-2016-9752 | High | 8.6 | 2016-12-01 | In Serendipity before 2.0.5, an attacker can bypass SSRF protection by using a malformed IP address (e.g., http://127.1) or a 30x (aka Redirection) HTTP status… |
CVE-2016-5968 | Medium | 5.3 | 2016-11-25 | The Replay Server in IBM Tealeaf Customer Experience 8.x before 8.7.1.8847 FP10, 8.8.x before 8.8.0.9049 FP9, 9.0.0 and 9.0.1 before 9.0.1.1117 FP5, 9.0.1A bef… |
CVE-2016-7964 | High | 8.6 | 2016-10-31 | The sendRequest method in HTTPClient Class in file /inc/HTTPClient.php in DokuWiki 2016-06-26a and older, when media file fetching is enabled, has no way to re… |
CVE-2016-6483 | High | 8.6 | 2016-09-02 | The media-file upload feature in vBulletin before 3.8.7 Patch Level 6, 3.8.8 before Patch Level 2, 3.8.9 before Patch Level 1, 4.x before 4.2.2 Patch Level 6… |
CVE-2016-4374 | High | 7.7 | 2016-08-08 | HPE Release Control (RC) 9.13, 9.20, and 9.21 before 9.21.0005 p4 allows remote authenticated users to conduct server-side request forgery (SSRF) attacks, and… |
CVE-2016-4029 | High | 8.6 | 2016-08-07 | WordPress before 4.5 does not consider octal and hexadecimal IP address formats when determining an intranet address, which allows remote attackers to bypass a… |
CVE-2016-3718 | Medium | 5.5 | 2016-05-05 | The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery (SSRF) atta… |
CVE-2010-1637 | Medium | 6.5 | 2010-06-22 | The Mail Fetch plugin in SquirrelMail 1.4.20 and earlier allows remote authenticated users to bypass firewall restrictions and use SquirrelMail as a proxy to s… |
CVE-2004-2061 | Critical | 9.8 | 2004-07-27 | RiSearch 1.0.01 and RiSearch Pro 3.2.06 allows remote attackers to use the show.pl script as an open proxy, or read arbitrary local files, by setting the url p… |
CVE-2002-1484 | Critical | 9.8 | 2003-04-22 | DB4Web server, when configured to use verbose debug messages, allows remote attackers to use DB4Web as a proxy and attempt TCP connections to other systems (po… |