CWE-918 · Server-Side Request Forgery (SSRF) (page 39)
Page 39 of 40 — CVEs classified under CWE-918, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-3809 | Medium | 6.5 | 2019-03-25 | A flaw was found in Moodle versions 3.1 to 3.1.15 and earlier unsupported versions. The mybackpack functionality allowed setting the URL of badges, when it sho… |
CVE-2019-6970 | High | 7.5 | 2019-03-21 | Moodle 3.5.x before 3.5.4 allows SSRF. |
CVE-2018-13103 | Medium | 5.4 | 2019-03-21 | OX App Suite 7.8.4 and earlier allows SSRF. |
CVE-2017-3164 | High | 7.5 | 2019-03-08 | Server Side Request Forgery in Apache Solr, versions 1.3 until 7.6 (inclusive). Since the "shards" parameter does not have a corresponding whitelist mechanism… |
CVE-2019-8982 | Critical | 9.6 | 2019-02-21 | com/wavemaker/studio/StudioService.java in WaveMaker Studio 6.6 mishandles the studioService.download?method=getContent&inUrl= value, leading to disclosure of… |
CVE-2019-1003028 | Medium | 4.3 | 2019-02-20 | A server-side request forgery vulnerability exists in Jenkins JMS Messaging Plugin 1.1.1 and earlier in SSLCertificateAuthenticationMethod.java, UsernameAuthen… |
CVE-2019-1003027 | Medium | 4.3 | 2019-02-20 | A server-side request forgery vulnerability exists in Jenkins OctopusDeploy Plugin 1.8.1 and earlier in OctopusDeployPlugin.java that allows attackers with Ove… |
CVE-2019-1003026 | Medium | 4.3 | 2019-02-20 | A server-side request forgery vulnerability exists in Jenkins Mattermost Notification Plugin 2.6.2 and earlier in MattermostNotifier.java that allows attackers… |
CVE-2018-13404 | Medium | 4.1 | 2019-02-13 | The VerifyPopServerConnection resource in Atlassian Jira before version 7.6.10, from version 7.7.0 before version 7.7.5, from version 7.8.0 before version 7.8… |
CVE-2018-18569 | High | 8.6 | 2019-02-11 | The Dundas BI server before 5.0.1.1010 is vulnerable to a Server-Side Request Forgery attack, allowing an attacker to forge arbitrary requests (with certain re… |
CVE-2019-1679 | Medium | 5.0 | 2019-02-07 | A vulnerability in the web interface of Cisco TelePresence Conductor, Cisco Expressway Series, and Cisco TelePresence Video Communication Server (VCS) Software… |
CVE-2019-1003020 | Medium | 4.3 | 2019-02-06 | A server-side request forgery vulnerability exists in Jenkins Kanboard Plugin 1.5.10 and earlier in KanboardGlobalConfiguration.java that allows attackers with… |
CVE-2018-15657 | High | 7.3 | 2019-02-05 | An SSRF issue was discovered in 42Gears SureMDM before 2018-11-27 via the /api/DownloadUrlResponse.ashx "url" parameter. |
CVE-2018-15517 | High | 8.6 | 2019-01-31 | The MailConnect feature on D-Link Central WiFiManager CWM-100 1.03 r0098 devices is intended to check a connection to an SMTP server but actually allows outbou… |
CVE-2018-15516 | Medium | 5.8 | 2019-01-31 | The FTP service on D-Link Central WiFiManager CWM-100 1.03 r0098 devices allows remote attackers to conduct a PORT command bounce scan via port 8000, resulting… |
CVE-2018-12609 | Medium | 6.5 | 2019-01-30 | OX App Suite 7.8.4 and earlier allows Server-Side Request Forgery. |
CVE-2019-6257 | High | 7.7 | 2019-01-14 | A Server Side Request Forgery (SSRF) vulnerability in elFinder before 2.1.46 could allow a malicious user to access the content of internal network resources… |
CVE-2018-1000422 | Medium | 6.5 | 2019-01-09 | An improper authorization vulnerability exists in Jenkins Crowd 2 Integration Plugin 2.0.0 and earlier in CrowdSecurityRealm.java that allows attackers to have… |
CVE-2018-1000421 | Medium | 6.5 | 2019-01-09 | An improper authorization vulnerability exists in Jenkins Mesos Plugin 0.17.1 and earlier in MesosCloud.java that allows attackers with Overall/Read access to… |
CVE-2019-5725 | High | 7.5 | 2019-01-08 | qibosoft through V7 allows remote attackers to read arbitrary files via the member/index.php main parameter, as demonstrated by SSRF to a URL on the same web s… |
CVE-2018-19601 | Critical | 9.1 | 2019-01-03 | Rhymix CMS 1.9.8.1 allows SSRF via an index.php?module=admin&act=dispModuleAdminFileBox SVG upload. |
CVE-2019-3905 | Critical | 10.0 | 2019-01-03 | Zoho ManageEngine ADSelfService Plus 5.x before build 5703 has SSRF. |
CVE-2018-14721 | Critical | 10.0 | 2019-01-02 | FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to conduct server-side request forgery (SSRF) attacks by leveraging failure to block t… |
CVE-2018-20596 | Critical | 9.8 | 2018-12-30 | Jspxcms v9.0.0 allows SSRF. |
CVE-2018-20528 | Medium | 6.5 | 2018-12-28 | JEECMS 9 has SSRF via the ueditor/getRemoteImage.jspx upfile parameter. |
CVE-2018-20436 | High | 8.1 | 2018-12-24 | The "secret chat" feature in Telegram 4.9.1 for Android has a "side channel" in which Telegram servers send GET requests for URLs typed while composing a chat… |
CVE-2018-20228 | High | 8.0 | 2018-12-19 | Subsonic V6.1.5 allows internetRadioSettings.view streamUrl CSRF, with resultant SSRF. |
CVE-2018-18843 | Critical | 10.0 | 2018-12-04 | The Kubernetes integration in GitLab Enterprise Edition 11.x before 11.2.8, 11.3.x before 11.3.9, and 11.4.x before 11.4.4 has SSRF. |
CVE-2018-18646 | High | 8.8 | 2018-12-04 | An issue was discovered in GitLab Community and Enterprise Edition before 11.2.7, 11.3.x before 11.3.8, and 11.4.x before 11.4.3. It allows SSRF. |
CVE-2018-19651 | Medium | 6.5 | 2018-11-28 | admin/functions/remote.php in Interspire Email Marketer through 6.1.6 has Server Side Request Forgery (SSRF) via a what=importurl&url= request with an http or… |
CVE-2018-19047 | Critical | 10.0 | 2018-11-07 | mPDF through 7.1.6, if deployed as a web application that accepts arbitrary HTML, allows SSRF, as demonstrated by a '<img src="http://192.168' substring that t… |
CVE-2018-18867 | High | 8.6 | 2018-10-31 | An SSRF issue was discovered in tecrail Responsive FileManager 9.13.4 via the upload.php url parameter. NOTE: this issue exists because of an incomplete fix fo… |
CVE-2018-18753 | Critical | 9.8 | 2018-10-29 | Typecho V1.1 allows remote attackers to send shell commands via base64-encoded serialized data, as demonstrated by SSRF. |
CVE-2018-16793 | High | 8.6 | 2018-09-21 | Rollup 18 for Microsoft Exchange Server 2010 SP3 and previous versions has an SSRF vulnerability via the username parameter in /owa/auth/logon.aspx in the OWA… |
CVE-2018-16794 | High | 8.6 | 2018-09-18 | Microsoft ADFS 4.0 Windows Server 2016 and previous (Active Directory Federation Services) has an SSRF vulnerability via the txtBoxEmail parameter in /adfs/ls. |
CVE-2018-2463 | High | 8.6 | 2018-09-11 | The Omni Commerce Connect API (OCC) of SAP Hybris Commerce, versions 6.*, is vulnerable to server-side request forgery (SSRF) attacks. This is due to a misconf… |
CVE-2018-1789 | High | 8.4 | 2018-09-07 | IBM API Connect v2018.1.0 through v2018.3.4 could allow an attacker to send a specially crafted request to conduct a server side request forgery attack. IBM X-… |
CVE-2018-16444 | Critical | 9.1 | 2018-09-04 | An issue was discovered in SeaCMS 6.61. adm1n/admin_reslib.php has SSRF via the url parameter. |
CVE-2018-16409 | High | 8.6 | 2018-09-03 | In Gogs 0.11.53, an attacker can use migrate to send arbitrary HTTP GET requests, leading to SSRF. |
CVE-2018-15895 | High | 7.5 | 2018-08-27 | An SSRF vulnerability was discovered in idreamsoft iCMS 7.0.11 because the remote function in app/spider/spider_tools.class.php does not block DNS hostnames as… |
CVE-2018-10511 | Critical | 10.0 | 2018-08-15 | A vulnerability in Trend Micro Control Manager (versions 6.0 and 7.0) could allow an attacker to conduct a server-side request forgery (SSRF) attack on vulnera… |
CVE-2018-2445 | Critical | 9.6 | 2018-08-14 | AdminTools in SAP BusinessObjects Business Intelligence, versions 4.1, 4.2, allows an attacker to manipulate the vulnerable application to send crafted request… |
CVE-2018-3774 | Critical | 10.0 | 2018-08-12 | Incorrect parsing in url-parse <1.4.3 returns wrong hostname which leads to multiple vulnerabilities such as SSRF, Open Redirect, Bypass Authentication Protoco… |
CVE-2018-15192 | High | 8.6 | 2018-08-08 | An SSRF vulnerability in webhooks in Gitea through 1.5.0-rc2 and Gogs through 0.11.53 allows remote attackers to access intranet services. |
CVE-2018-14728 | Critical | 9.8 | 2018-08-03 | upload.php in Responsive FileManager 9.13.1 allows SSRF via the url parameter. |
CVE-2018-14858 | High | 7.5 | 2018-08-02 | An SSRF vulnerability was discovered in idreamsoft iCMS before V7.0.11 because the remote function in app/spider/spider_tools.class.php does not block private… |
CVE-2018-1999039 | Medium | 4.3 | 2018-08-01 | A server-side request forgery vulnerability exists in Jenkins Confluence Publisher Plugin 2.0.1 and earlier in ConfluenceSite.java that allows attackers to hav… |
CVE-2018-1999026 | Medium | 6.5 | 2018-08-01 | A server-side request forgery vulnerability exists in Jenkins TraceTronic ECU-TEST Plugin 2.3 and earlier in ATXPublisher.java that allows attackers to have Je… |
CVE-2018-1999017 | Medium | 4.9 | 2018-07-23 | Pydio version 8.2.0 and earlier contains a Server-Side Request Forgery (SSRF) vulnerability in plugins/action.updater/UpgradeManager.php Line: 154, getUpgradeP… |
CVE-2018-14514 | Critical | 9.8 | 2018-07-23 | An SSRF vulnerability was discovered in idreamsoft iCMS V7.0.9 that allows attackers to read sensitive files, access an intranet, or possibly have unspecified… |
CVE-2018-5006 | High | 7.5 | 2018-07-20 | Adobe Experience Manager versions 6.4 and earlier have a Server-Side Request Forgery vulnerability. Successful exploitation could lead to sensitive information… |
CVE-2018-5004 | High | 7.5 | 2018-07-20 | Adobe Experience Manager versions 6.2 and 6.3 have a Server-Side Request Forgery vulnerability. Successful exploitation could lead to sensitive information dis… |
CVE-2018-12809 | High | 7.5 | 2018-07-20 | Adobe Experience Manager versions 6.4 and earlier have a Server-Side Request Forgery vulnerability. Successful exploitation could lead to sensitive information… |
CVE-2018-0403 | Critical | 9.8 | 2018-07-18 | Multiple vulnerabilities in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote att… |
CVE-2018-0399 | Critical | 9.8 | 2018-07-18 | Multiple vulnerabilities in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to retrieve a cleartext passwor… |
CVE-2018-0398 | Critical | 9.8 | 2018-07-18 | Multiple vulnerabilities in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct a server-side reques… |
CVE-2018-13790 | High | 7.2 | 2018-07-09 | A Server Side Request Forgery (SSRF) vulnerability in tools/files/importers/remote.php in concrete5 8.2.0 can lead to attacks on the local network and mapping… |
CVE-2018-12571 | Critical | 9.8 | 2018-07-05 | uniquesig0/InternalSite/InitParams.aspx in Microsoft Forefront Unified Access Gateway 2010 allows remote attackers to trigger outbound DNS queries for arbitrar… |
CVE-2017-0929 | High | 7.5 | 2018-07-03 | DNN (aka DotNetNuke) before 9.2.0 suffers from a Server-Side Request Forgery (SSRF) vulnerability in the DnnImageHandler class. Attackers may be able to access… |
CVE-2018-1000606 | Medium | 6.5 | 2018-06-26 | A server-side request forgery vulnerability exists in Jenkins URLTrigger Plugin 0.41 and earlier in URLTrigger.java that allows attackers with Overall/Read acc… |
CVE-2018-1000553 | High | 8.8 | 2018-06-26 | Trovebox version <= 4.0.0-rc6 contains a Server-Side request forgery vulnerability in webhook component that can result in read or update internal resources. T… |
CVE-2018-12678 | Critical | 9.8 | 2018-06-22 | Portainer before 1.18.0 supports unauthenticated requests to the websocket endpoint with an unvalidated id query parameter for the /websocket/exec endpoint, wh… |
CVE-2018-5752 | High | 8.8 | 2018-06-16 | The backend component in Open-Xchange OX App Suite before 7.6.3-rev36, 7.8.x before 7.8.2-rev39, 7.8.3 before 7.8.3-rev44, and 7.8.4 before 7.8.4-rev22 allows… |
CVE-2018-11586 | Critical | 9.8 | 2018-06-05 | XML external entity (XXE) vulnerability in api/rest/status in SearchBlox 8.6.7 allows remote unauthenticated users to read arbitrary files or conduct server-si… |
CVE-2018-1000188 | Medium | 5.4 | 2018-06-05 | A server-side request forgery vulnerability exists in Jenkins CAS Plugin 1.4.1 and older in CasSecurityRealm.java that allows attackers with Overall/Read acces… |
CVE-2018-1000185 | Medium | 4.3 | 2018-06-05 | A server-side request forgery vulnerability exists in Jenkins GitHub Branch Source Plugin 2.3.4 and older in Endpoint.java that allows attackers with Overall/R… |
CVE-2018-1000184 | Medium | 5.4 | 2018-06-05 | A server-side request forgery vulnerability exists in Jenkins GitHub Plugin 1.29.0 and older in GitHubPluginConfig.java that allows attackers with Overall/Read… |
CVE-2018-1000182 | Medium | 6.4 | 2018-06-05 | A server-side request forgery vulnerability exists in Jenkins Git Plugin 3.9.0 and older in AssemblaWeb.java, GitBlitRepositoryBrowser.java, Gitiles.java, TFS2… |
CVE-2018-9920 | Medium | 6.5 | 2018-05-24 | Server side request forgery exists in the runtime application in K2 smartforms 4.6.11 via a modified hostname in an https://*/Identity/STS/Forms/Scripts URL. |
CVE-2018-11031 | Critical | 9.8 | 2018-05-14 | application/home/controller/debug.php in PHPRAP 1.0.4 through 1.0.8 has SSRF via the /debug URI, as demonstrated by an api[url]=file:////etc/passwd&api[method]… |
CVE-2018-9919 | Critical | 9.8 | 2018-05-02 | A web-accessible backdoor, with resultant SSRF, exists in Tp-shop 2.0.5 through 2.0.8, which allows remote attackers to obtain sensitive information, attack in… |
CVE-2018-9302 | Critical | 9.1 | 2018-05-02 | SSRF (Server Side Request Forgery) in /assets/lib/fuc.js.php in Cockpit 0.4.4 through 0.5.5 allows remote attackers to read arbitrary files or send TCP traffic… |
CVE-2018-8939 | Critical | 9.8 | 2018-05-01 | An SSRF issue was discovered in NmAPI.exe in Ipswitch WhatsUp Gold before 2018 (18.0). Malicious actors can submit specially crafted requests via the NmAPI exe… |
CVE-2018-8801 | Medium | 6.5 | 2018-04-25 | GitLab Community and Enterprise Editions version 8.3 up to 10.x before 10.3 are vulnerable to SSRF in the Services and webhooks component. |
CVE-2018-10174 | Medium | 6.5 | 2018-04-20 | Digital Guardian Management Console 7.1.2.0015 has an SSRF issue that allows remote attackers to read arbitrary files via file:// URLs, send TCP traffic to int… |
CVE-2018-10220 | High | 8.8 | 2018-04-19 | Glastopf 3.1.3-dev has SSRF, as demonstrated by the abc.php a parameter. NOTE: the vendor indicates that this is intentional behavior because the product is a… |
CVE-2017-14611 | Critical | 9.1 | 2018-04-10 | SSRF (Server Side Request Forgery) in Cockpit 0.13.0 allows remote attackers to read arbitrary files or send TCP traffic to intranet hosts via the url paramete… |
CVE-2017-14323 | Critical | 9.8 | 2018-04-10 | SSRF (Server Side Request Forgery) in getRemoteImage.php in Ueditor in Onethink V1.0 and V1.1 allows remote attackers to obtain sensitive information, attack i… |
CVE-2017-18096 | High | 7.2 | 2018-04-04 | The OAuth status rest resource in Atlassian Application Links before version 5.2.7, from 5.3.0 before 5.3.4 and from 5.4.0 before 5.4.3 allows remote attackers… |
CVE-2017-16614 | Critical | 9.8 | 2018-03-30 | SSRF (Server Side Request Forgery) in tpshop 2.0.5 and 2.0.6 allows remote attackers to obtain sensitive information, attack intranet hosts, or possibly trigge… |
CVE-2018-1000138 | Critical | 9.1 | 2018-03-23 | I, Librarian version 4.8 and earlier contains a SSRF vulnerability in "url" parameter of getFromWeb in functions.php that can result in the attacker abusing fu… |
CVE-2018-7516 | High | 7.3 | 2018-03-22 | A server-side request forgery vulnerability has been identified in Geutebruck G-Cam/EFD-2250 Version 1.12.0.4 and Topline TopFD-2125 Version 3.15.1 IP cameras… |
CVE-2014-3990 | Critical | 9.8 | 2018-03-20 | The Cart::getProducts method in system/library/cart.php in OpenCart 1.5.6.4 and earlier allows remote attackers to conduct server-side request forgery (SSRF) a… |
CVE-2018-1000124 | Critical | 10.0 | 2018-03-13 | I Librarian I-librarian version 4.8 and earlier contains a XML External Entity (XXE) vulnerability in line 154 of importmetadata.php(simplexml_load_string) tha… |
CVE-2018-7667 | Critical | 9.8 | 2018-03-05 | Adminer through 4.3.1 has SSRF via the server parameter. |
CVE-2018-1000067 | Medium | 5.3 | 2018-02-16 | An improper authorization vulnerability exists in Jenkins versions 2.106 and earlier, and LTS 2.89.3 and earlier, that allows an attacker to have Jenkins submi… |
CVE-2018-7055 | High | 7.5 | 2018-02-15 | GroupViewProxyServlet in RoomWizard before 4.4.x allows SSRF via the url parameter. |
CVE-2018-2370 | Medium | 5.3 | 2018-02-14 | Server Side Request Forgery (SSRF) vulnerability in SAP Central Management Console, BI Launchpad and Fiori BI Launchpad, 4.10, from 4.20, from 4.30, could allo… |
CVE-2018-1000056 | High | 8.3 | 2018-02-09 | Jenkins JUnit Plugin 1.23 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permissions… |
CVE-2018-1000055 | High | 8.3 | 2018-02-09 | Jenkins Android Lint Plugin 2.5 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permi… |
CVE-2018-1000054 | High | 8.3 | 2018-02-09 | Jenkins CCM Plugin 3.1 and earlier processes XML external entities in files it parses as part of the build process, allowing attackers with user permissions in… |
CVE-2017-6201 | High | 8.1 | 2018-02-06 | A Server Side Request Forgery vulnerability exists in the install app process in Sandstorm before build 0.203. A remote attacker may exploit this issue by prov… |
CVE-2017-18036 | Medium | 4.3 | 2018-02-02 | The Github repository importer in Atlassian Bitbucket Server before version 5.3.0 allows remote attackers to determine if a service they could not otherwise re… |
CVE-2018-6186 | High | 8.8 | 2018-02-01 | Citrix NetScaler VPX through NS12.0 53.13.nc allows an SSRF attack via the /rapi/read_url URI by an authenticated attacker who has a webapp account. The attack… |
CVE-2018-6029 | High | 7.5 | 2018-01-23 | The copy function in application/admin/controller/Article.php in NoneCms 1.3.0 allows remote attackers to access the content of internal and external network r… |
CVE-2018-1042 | Medium | 6.5 | 2018-01-22 | Moodle 3.x has Server Side Request Forgery in the filepicker. |
CVE-2017-16865 | Medium | 5.3 | 2018-01-17 | The Trello importer in Atlassian Jira before version 7.6.1 allows remote attackers to access the content of internal network resources via a Server Side Reques… |
CVE-2017-1000419 | High | 7.5 | 2018-01-02 | phpBB version 3.2.0 is vulnerable to SSRF in the Remote Avatar function resulting allowing an attacker to perform port scanning, requesting internal content an… |
CVE-2017-15886 | Medium | 6.5 | 2017-12-28 | Server-side request forgery (SSRF) vulnerability in Link Preview in Synology Chat before 2.0.0-1124 allows remote authenticated users to download arbitrary loc… |
CVE-2017-17697 | High | 8.6 | 2017-12-15 | The Ping() function in ui/api/target.go in Harbor through 1.3.0-rc4 has SSRF via the endpoint parameter to /api/targets/ping. |