C1 CMS is an open-source, .NET based Content Management System (CMS). Versions prior to 6.12 allow an authenticated user to exploit Server Side Request Forgery (SSRF) by causing the server to make arbitrary GET requests to other servers in…

CVE-2022-24825MEDIUMCVSS 5.8EG 5.8

2022-04-19

Smokescreen is a simple HTTP proxy that fogs over naughty URLs. The primary use case for Smokescreen is to prevent server-side request forgery (SSRF) attacks in which external attackers leverage the behavior of applications to connect to o…

CVE-2022-24856CRITICALCVSS 9.1EG 9.1

2022-05-17

FlyteConsole is the web user interface for the Flyte platform. FlyteConsole prior to version 0.52.0 is vulnerable to server-side request forgery (SSRF) when FlyteConsole is open to the general internet. An attacker can exploit any user of …

CVE-2022-24862HIGHCVSS 7.7EG 7.7

2022-04-20

Databasir is a team-oriented relational database model document management platform. Databasir 1.01 has Server-Side Request Forgery vulnerability. During the download verification process of a JDBC driver the corresponding JDBC driver down…

CVE-2022-24871HIGHCVSS 7.2EG 7.2

2022-04-20

Shopware is an open commerce platform based on Symfony Framework and Vue. In affected versions an attacker can abuse the Admin SDK functionality on the server to read or update internal resources. Users are advised to update to the current…

CVE-2022-24969MEDIUMCVSS 6.1EG 6.1

2022-06-09

bypass CVE-2021-25640 > In Apache Dubbo prior to 2.6.12 and 2.7.15, the usage of parseURL method will lead to the bypass of the white host check which can cause open redirect or SSRF vulnerability.

CVE-2022-24980HIGHCVSS 7.5EG 7.5

2022-02-19

An issue was discovered in the Kitodo.Presentation (aka dif) extension before 2.3.2, 3.x before 3.2.3, and 3.3.x before 3.3.4 for TYPO3. A missing access check in an eID script allows an unauthenticated user to submit arbitrary URLs to thi…

CVE-2022-25026HIGHCVSS 7.5EG 7.5

2023-01-12

A Server-Side Request Forgery (SSRF) in Rocket TRUfusion Portal v7.9.2.1 allows remote attackers to gain access to sensitive resources on the internal network via a crafted HTTP request to /trufusionPortal/upDwModuleProxy.

CVE-2022-25260CRITICALCVSS 9.1EG 9.1

2022-02-25

JetBrains Hub before 2021.1.14276 was vulnerable to blind Server-Side Request Forgery (SSRF).

CVE-2022-2556LOWCVSS 2.7EG 2.7

2022-08-29

The Mailchimp for WooCommerce WordPress plugin before 2.7.2 has an AJAX action that allows high privilege users to perform a POST request on behalf of the server to the internal network/LAN, the body of the request is also appended to the …

CVE-2022-25777MEDIUMCVSS 6.5EG 6.5

2024-09-18

Prior to the patched version, an authenticated user of Mautic could read system files and access the internal addresses of the application due to a Server-Side Request Forgery (SSRF) vulnerability.

CVE-2022-25800CRITICALCVSS 9.1EG 9.1

2022-07-14

Best Practical RT for Incident Response (RTIR) before 4.0.3 and 5.x before 5.0.3 allows SSRF via the whois lookup tool.

CVE-2022-25801CRITICALCVSS 9.1EG 9.1

2022-07-14

Best Practical RT for Incident Response (RTIR) before 4.0.3 and 5.x before 5.0.3 allows SSRF via Scripted Action tools.

CVE-2022-25850HIGHCVSS 7.5EG 7.5

2022-05-01

The package github.com/hoppscotch/proxyscotch before 1.0.0 are vulnerable to Server-side Request Forgery (SSRF) when interceptor mode is set to proxy. It occurs when an HTTP request is made by a backend server to an untrusted URL submitted…

CVE-2022-25876MEDIUMCVSS 6.2EG 6.2

2022-07-01

The package link-preview-js before 2.1.16 are vulnerable to Server-side Request Forgery (SSRF) which allows attackers to send arbitrary requests to the local network and read the response. This is due to flawed DNS rebinding protection.

CVE-2022-26135MEDIUMCVSS 6.5EG 6.5

2022-06-30

A vulnerability in Mobile Plugin for Jira Data Center and Server allows a remote, authenticated user (including a user who joined via the sign-up feature) to perform a full read server-side request forgery via a batch endpoint. This affect…

CVE-2022-2633HIGHCVSS 7.5EG 9.0

2022-09-06

The All-in-One Video Gallery plugin for WordPress is vulnerable to arbitrary file downloads and blind server-side request forgery via the 'dl' parameter found in the ~/public/video.php file in versions up to, and including 2.6.0. This make…

CVE-2022-26499CRITICALCVSS 9.1EG 9.1

2022-04-15

An SSRF issue was discovered in Asterisk through 19.x. When using STIR/SHAKEN, it's possible to send arbitrary requests (such as GET) to interfaces such as localhost by using the Identity header. This is fixed in 16.25.2, 18.11.2, and 19.3…

CVE-2022-27234MEDIUMCVSS 4.3EG 6.5

2023-02-16

Server-side request forgery in the CVAT software maintained by Intel(R) before version 2.0.1 may allow an authenticated user to potentially enable information disclosure via network access.

CVE-2022-27245HIGHCVSS 8.8EG 8.8

2022-03-18

An issue was discovered in MISP before 2.4.156. app/Model/Server.php does not restrict generateServerSettings to the CLI. This could lead to SSRF.

CVE-2022-27311CRITICALCVSS 9.8EG 9.8

2022-04-25

Gibbon v3.4.4 and below allows attackers to execute a Server-Side Request Forgery (SSRF) via a crafted URL.

CVE-2022-27426HIGHCVSS 8.8EG 8.8

2022-04-15

A Server-Side Request Forgery (SSRF) in Chamilo LMS v1.11.13 allows attackers to enumerate the internal network and execute arbitrary system commands via a crafted Phar file.

CVE-2022-27429CRITICALCVSS 9.8EG 9.8

2022-04-25

Jizhicms v1.9.5 was discovered to contain a Server-Side Request Forgery (SSRF) vulnerability via /admin.php/Plugins/update.html.

CVE-2022-27469CRITICALCVSS 9.8EG 9.8

2022-04-26

Monstaftp v2.10.3 was discovered to allow attackers to execute Server-Side Request Forgery (SSRF).

CVE-2022-2756MEDIUMCVSS 6.5EG 6.5

2022-08-10

Server-Side Request Forgery (SSRF) in GitHub repository kareadita/kavita prior to 0.5.4.1.

CVE-2022-27622MEDIUMCVSS 4.1EG 4.3

2022-10-25

Server-Side Request Forgery (SSRF) vulnerability in Package Center functionality in Synology DiskStation Manager (DSM) before 7.1-42661 allows remote authenticated users to access intranet resources via unspecified vectors.

CVE-2022-27780HIGHCVSS 7.5EG 7.5

2022-06-02

The curl URL parser wrongly accepts percent-encoded URL separators like '/'when decoding the host name part of a URL, making it a *different* URL usingthe wrong host name when it is later retrieved.For example, a URL like `http://example.c…

CVE-2022-27907MEDIUMCVSS 4.3EG 4.3

2022-03-30

Sonatype Nexus Repository Manager 3.x before 3.38.0 allows SSRF.

CVE-2022-28090MEDIUMCVSS 6.5EG 6.5

2022-05-04

Jspxcms v10.2.0 allows attackers to execute a Server-Side Request Forgery (SSRF) via /cmscp/ext/collect/fetch_url.do?url=.

CVE-2022-28117MEDIUMCVSS 4.9EG 4.9

2022-04-28

A Server-Side Request Forgery (SSRF) in feed_parser class of Navigate CMS v2.9.4 allows remote attackers to force the application to make arbitrary requests via injection of arbitrary URLs into the feed parameter.

CVE-2022-28217MEDIUMCVSS 6.5EG 6.5

2022-06-13

Some part of SAP NetWeaver (EP Web Page Composer) does not sufficiently validate an XML document accepted from an untrusted source, which allows an adversary to exploit unprotected XML parking at endpoints, and a possibility to conduct SSR…

CVE-2022-28616CRITICALCVSS 9.8EG 9.8

2022-05-17

A remote server-side request forgery (ssrf) vulnerability was discovered in HPE OneView version(s): Prior to 7.0. HPE has provided a software update to resolve this vulnerability in HPE OneView.

CVE-2022-28997HIGHCVSS 7.5EG 7.5

2022-05-23

CSZCMS v1.3.0 allows attackers to execute a Server-Side Request Forgery (SSRF) which can be leveraged to leak sensitive data via a local file inclusion at /admin/filemanager/connector/.

CVE-2022-2900CRITICALCVSS 9.1EG 9.1

2022-09-14

Server-Side Request Forgery (SSRF) in GitHub repository ionicabizau/parse-url prior to 8.1.0.

CVE-2022-2912MEDIUMCVSS 4.3EG 4.3

2022-09-16

The Craw Data WordPress plugin through 1.0.0 does not implement nonce checks, which could allow attackers to make a logged in admin change the url value performing unwanted crawls on third-party sites (SSRF).

CVE-2022-29153HIGHCVSS 7.5EG 9.0

2022-04-19

HashiCorp Consul and Consul Enterprise up to 1.9.16, 1.10.9, and 1.11.4 may allow server side request forgery when the Consul client agent follows redirects returned by HTTP health check endpoints. Fixed in 1.9.17, 1.10.10, and 1.11.5.

CVE-2022-29180MEDIUMCVSS 5.9EG 5.9

2022-05-07

A vulnerability in which attackers could forge HTTP requests to manipulate the `charm` data directory to access or delete anything on the server. This has been patched and is available in release [v0.12.1](https://github.com/charmbracelet/…

CVE-2022-29188MEDIUMCVSS 5.3EG 5.3

2022-05-21

Smokescreen is an HTTP proxy. The primary use case for Smokescreen is to prevent server-side request forgery (SSRF) attacks in which external attackers leverage the behavior of applications to connect to or scan internal infrastructure. Sm…

CVE-2022-29309HIGHCVSS 7.5EG 7.5

2022-05-24

mysiteforme v2.2.1 was discovered to contain a Server-Side Request Forgery.

CVE-2022-29556CRITICALCVSS 9.8EG 9.8

2022-04-28

The iot-manager microservice 1.0.0 in Northern.tech Mender Enterprise before 3.2.2 allows SSRF because the Azure IoT Hub integration provides several SSRF primitives that can execute cross-tenant actions via internal API endpoints.

CVE-2022-29612MEDIUMCVSS 4.3EG 4.3

2022-06-14

SAP NetWeaver, ABAP Platform and SAP Host Agent - versions KERNEL 7.22, 7.49, 7.53, 7.77, 7.81, 7.85, 7.86, 7.87, 7.88, 8.04, KRNL64NUC 7.22, 7.22EXT, 7.49, KRNL64UC 7.22, 7.22EXT, 7.49, 7.53, 8.04, SAPHOSTAGENT 7.22, allows an authenticat…

CVE-2022-29840MEDIUMCVSS 5.1EG 5.1

2023-05-10

Server-Side Request Forgery (SSRF) vulnerability that could allow a rogue server on the local network to modify its URL to point back to the loopback adapter was addressed in Western Digital My Cloud OS 5 devices. This could allow the URL …

CVE-2022-29847HIGHCVSS 7.5EG 7.5

2022-05-11

In Progress Ipswitch WhatsUp Gold 21.0.0 through 21.1.1, and 22.0.0, it is possible for an unauthenticated attacker to invoke an API transaction that would allow them to relay encrypted WhatsUp Gold user credentials to an arbitrary host.

CVE-2022-29848MEDIUMCVSS 6.5EG 6.5

2022-05-11

In Progress Ipswitch WhatsUp Gold 17.0.0 through 21.1.1, and 22.0.0, it is possible for an authenticated user to invoke an API transaction that would allow them to read sensitive operating-system attributes from a host that is accessible b…

CVE-2022-29942MEDIUMCVSS 6.5EG 6.5

2022-05-04

Talend Administration Center has a vulnerability that allows an authenticated user to use the Service Registry 'Add' functionality to perform SSRF HTTP GET requests on URLs in the internal network. The issue is fixed for versions 8.0.x in …

CVE-2022-30049HIGHCVSS 7.5EG 7.5

2022-05-15

A Server-Side Request Forgery (SSRF) in Rebuild v2.8.3 allows attackers to obtain the real IP address and scan Intranet information via the fileurl parameter.

CVE-2022-30579HIGHCVSS 7.1EG 8.4

2022-09-20

The Web Player component of TIBCO Software Inc.'s TIBCO Spotfire Analytics Platform for AWS Marketplace and TIBCO Spotfire Server contains a difficult to exploit vulnerability that allows a low privileged attacker with network access to ex…

CVE-2022-31132HIGHCVSS 8.3EG 8.3

2022-08-04

Nextcloud Mail is an email application for the nextcloud personal cloud product. Affected versions shipped with a CSS minifier on the path `./vendor/cerdic/css-tidy/css_optimiser.php`. Access to the minifier is unrestricted and access may …

CVE-2022-31188HIGHCVSS 8.6EG 8.6

2022-08-01

CVAT is an opensource interactive video and image annotation tool for computer vision. Versions prior to 2.0.0 were found to be subject to a Server-side request forgery (SSRF) vulnerability. Validation has been added to urls used in the af…

CVE-2022-31196HIGHCVSS 7.6EG 7.6

2022-09-02

Databasir is a database metadata management platform. Databasir <= 1.06 has Server-Side Request Forgery (SSRF) vulnerability. The SSRF is triggered by a sending a **single** HTTP POST request to create a databaseType. By supplying a `jdbcD…

CWE-918— Server-Side Request Forgery (SSRF)

CVEs classified under CWE-918page 13 of 48

Map vulnerabilities like CWE-918 to your infrastructure