A Server-Side Request Forgery (SSRF) in the getFileBinary function of nbnbk cms 3 allows attackers to force the application to make arbitrary requests via injection of arbitrary URLs into the URL parameter.

CVE-2022-31390CRITICALCVSS 9.1EG 9.1

2022-06-09

Jizhicms v2.2.5 was discovered to contain a Server-Side Request Forgery (SSRF) vulnerability via the Update function in app/admin/c/TemplateController.php.

CVE-2022-31393CRITICALCVSS 9.1EG 9.1

2022-06-09

Jizhicms v2.2.5 was discovered to contain a Server-Side Request Forgery (SSRF) vulnerability via the Index function in app/admin/c/PluginsController.php.

CVE-2022-3172MEDIUMCVSS 5.1EG 5.1

2023-11-03

A security issue was discovered in kube-apiserver that allows an aggregated API server to redirect client traffic to any URL. This could lead to the client performing unexpected actions as well as forwarding the client's API server cre…

CVE-2022-31776HIGHCVSS 8.8EG 8.8

2022-08-01

IBM DataPower Gateway 10.0.2.0 through 10.0.4.0, 10.0.1.0 through 10.0.1.8, 10.5.0.0, and 2018.4.1.0 through 2018.4.1.21 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized req…

CVE-2022-31827CRITICALCVSS 9.1EG 9.1

2022-06-09

MonstaFTP v2.10.3 was discovered to contain a Server-Side Request Forgery (SSRF) via the function performFetchRequest at HTTPFetcher.php.

CVE-2022-31830CRITICALCVSS 9.1EG 9.1

2022-06-09

Kity Minder v1.3.5 was discovered to contain a Server-Side Request Forgery (SSRF) via the init function at ImageCapture.class.php.

CVE-2022-3189MEDIUMCVSS 5.3EG 5.3

2022-12-21

Dataprobe iBoot-PDU FW versions prior to 1.42.06162022 contain a vulnerability where a specially crafted PHP script could use parameters from a HTTP request to create a URL capable of changing the host parameter. The changed host paramet…

CVE-2022-32457MEDIUMCVSS 5.3EG 5.3

2022-07-20

Digiwin BPM has inadequate filtering for URL parameter. An unauthenticated remote attacker can perform Blind SSRF attack to discover internal network topology base on URL error response.

CVE-2022-3247MEDIUMCVSS 6.5EG 6.5

2022-10-25

The Blog2Social: Social Media Auto Post & Scheduler WordPress plugin before 6.9.10 does not have authorisation in an AJAX action, and does not ensure that the URL to make a request to is an external one. As a result, any authenticated user…

CVE-2022-32533CRITICALCVSS 9.8EG 9.8

2022-07-06

Apache Jetspeed-2 does not sufficiently filter untrusted user input by default leading to a number of issues including XSS, CSRF, XXE, and SSRF. Setting the configuration option "xss.filter.post = true" may mitigate these issues. NOTE: Apa…

CVE-2022-32995CRITICALCVSS 9.8EG 9.8

2022-06-27

Halo CMS v1.5.3 was discovered to contain a Server-Side Request Forgery (SSRF) via the template remote download function.

CVE-2022-34011MEDIUMCVSS 4.3EG 4.3

2022-06-23

OneBlog v2.3.4 was discovered to contain a Server-Side Request Forgery (SSRF) vulnerability via the parameter entryUrls.

CVE-2022-34013MEDIUMCVSS 4.3EG 4.3

2022-06-23

OneBlog v2.3.4 was discovered to contain a Server-Side Request Forgery (SSRF) vulnerability via the Logo parameter under the Link module.

CVE-2022-34269HIGHCVSS 8.8EG 8.8

2024-02-29

An issue was discovered in RWS WorldServer before 11.7.3. An authenticated, remote attacker can perform a ws-legacy/load_dtd?system_id= blind SSRF attack to deploy JSP code to the Apache Axis service running on the localhost interface, lea…

CVE-2022-35282MEDIUMCVSS 6.5EG 6.5

2022-09-28

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to server-side request forgery (SSRF). By sending a specially crafted request, an attacker with local network access could exploit this vulnerability to obtain sensitive…

CVE-2022-35508CRITICALCVSS 9.8EG 9.8

2022-12-04

Proxmox Virtual Environment (PVE) and Proxmox Mail Gateway (PMG) are vulnerable to SSRF when proxying HTTP requests between pve(pmg)proxy and pve(pmg)daemon. An attacker with an unprivileged account can craft an HTTP request to achieve SSR…

CVE-2022-35583CRITICALCVSS 9.8EG 9.8

2022-08-22

wkhtmlTOpdf 0.12.6 is vulnerable to SSRF which allows an attacker to get initial access into the target's system by injecting iframe tag with initial asset IP address on it's source. This allows the attacker to takeover the whole infrastru…

CVE-2022-3590MEDIUMCVSS 5.9EG 9.0

2022-12-14

WordPress is affected by an unauthenticated blind SSRF in the pingback feature. Because of a TOCTOU race condition between the validation checks and the HTTP request, attackers can reach internal hosts that are explicitly forbidden.

CVE-2022-35949MEDIUMCVSS 5.3EG 5.3

2022-08-12

undici is an HTTP/1.1 client, written from scratch for Node.js.`undici` is vulnerable to SSRF (Server-side Request Forgery) when an application takes in **user input** into the `path/pathname` option of `undici.request`. If a user specifie…

CVE-2022-36112LOWCVSS 3.5EG 3.5

2022-09-14

GLPI stands for Gestionnaire Libre de Parc Informatique and is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. Usage of RSS feeds or extenal calendar in pl…

CVE-2022-36376MEDIUMCVSS 6.8EG 9.8

2022-09-09

Server-Side Request Forgery (SSRF) vulnerability in Rank Math SEO plugin <= 1.0.95 at WordPress.

CVE-2022-36451HIGHCVSS 8.8EG 8.8

2022-10-25

A vulnerability in the MiCollab Client server component of Mitel MiCollab through 9.5.0.101 could allow an authenticated attacker to conduct a Server-Side Request Forgery (SSRF) attack due to insufficient restriction of URL parameters. A s…

CVE-2022-36551MEDIUMCVSS 6.5EG 6.5

2022-10-03

A Server Side Request Forgery (SSRF) in the Data Import module in Heartex - Label Studio Community Edition versions 1.5.0 and earlier allows an authenticated user to access arbitrary files on the system. Furthermore, self-registration is e…

CVE-2022-36663CRITICALCVSS 9.8EG 9.8

2022-09-06

Gluu Oxauth before v4.4.1 allows attackers to execute blind SSRF (Server-Side Request Forgery) attacks via a crafted request_uri parameter.

CVE-2022-36802MEDIUMCVSS 4.9EG 4.9

2022-10-14

The ManageJiraConnectors API in Atlassian Jira Align before version 10.109.2 allows remote attackers to exploit this issue to access internal network resources via a Server-Side Request Forgery. This can be exploited by a remote, unauthent…

CVE-2022-36997HIGHCVSS 7.1EG 8.8

2022-07-28

An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products). An attacker with authenticated access to a NetBackup Client coul…

CVE-2022-37033MEDIUMCVSS 6.5EG 6.5

2023-02-01

In dotCMS 5.x-22.06, TempFileAPI allows a user to create a temporary file based on a passed in URL, while attempting to block any SSRF access to local IP addresses or private subnets. In resolving this URL, the TempFileAPI follows any 302 …

CVE-2022-37041HIGHCVSS 7.5EG 7.5

2022-08-12

An issue was discovered in ProxyServlet.java in the /proxy servlet in Zimbra Collaboration Suite (ZCS) 8.8.15 and 9.0. The value of the X-Forwarded-Host header overwrites the value of the Host header in proxied requests. The value of X-For…

CVE-2022-3708CRITICALCVSS 9.6EG 8.1

2022-10-28

The Web Stories plugin for WordPress is vulnerable to Server-Side Request Forgery in versions up to, and including 1.24.0 due to insufficient validation of URLs supplied via the 'url' parameter found via the /v1/hotlink/proxy REST API Endp…

CVE-2022-37313MEDIUMCVSS 5.3EG 5.3

2022-12-26

OX App Suite through 7.10.6 allows SSRF because the anti-SSRF protection mechanism only checks the first DNS AA or AAAA record.

CVE-2022-37938CRITICALCVSS 9.8EG 9.8

2023-03-01

Unauthenticated server side request forgery in HPE Serviceguard Manager

CVE-2022-38187HIGHCVSS 7.5EG 7.5

2022-08-15

Prior to version 10.9.0, the sharing/rest/content/features/analyze endpoint is always accessible to anonymous users, which could allow an unauthenticated attacker to induce Esri Portal for ArcGIS to read arbitrary URLs.

CVE-2022-38203HIGHCVSS 7.5EG 7.5

2022-12-29

Protections against potential Server-Side Request Forgery (SSRF) vulnerabilities in Esri Portal for ArcGIS versions 10.8.1 and below were not fully honored and may allow a remote, unauthenticated attacker to forge requests to arbitrary URL…

CVE-2022-38211HIGHCVSS 7.5EG 7.5

2022-12-29

Protections against potential Server-Side Request Forgery (SSRF) vulnerabilities in Esri Portal for ArcGIS versions 10.9.1 and below were not fully honored and may allow a remote, unauthenticated attacker to forge requests to arbitrary URL…

CVE-2022-38212HIGHCVSS 7.5EG 7.5

2022-12-29

Protections against potential Server-Side Request Forgery (SSRF) vulnerabilities in Esri Portal for ArcGIS versions 10.8.1 and below were not fully honored and may allow a remote, unauthenticated attacker to forge requests to arbitrary URL…

CVE-2022-38292CRITICALCVSS 9.8EG 9.8

2022-09-12

SLiMS Senayan Library Management System v9.4.2 was discovered to contain multiple Server-Side Request Forgeries via the components /bibliography/marcsru.php and /bibliography/z3950sru.php.

CVE-2022-38298HIGHCVSS 8.8EG 8.8

2022-09-12

Appsmith v1.7.11 was discovered to allow attackers to execute an authenticated Server-Side Request Forgery (SSRF) via redirecting incoming requests to the AWS internal metadata endpoint.

CVE-2022-38398MEDIUMCVSS 5.3EG 5.3

2022-09-22

Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an attacker to load a url thru the jar protocol. This issue affects Apache XML Graphics Batik 1.14.

CVE-2022-3841HIGHCVSS 7.8EG 7.8

2023-01-13

RHACM: unauthenticated SSRF in console API endpoint. A Server-Side Request Forgery (SSRF) vulnerability was found in the console API endpoint from Red Hat Advanced Cluster Management for Kubernetes (RHACM). An attacker could take advantage…

CVE-2022-38580CRITICALCVSS 9.8EG 9.8

2022-10-25

Zalando Skipper v0.13.236 is vulnerable to Server-Side Request Forgery (SSRF).

CVE-2022-38648MEDIUMCVSS 5.3EG 5.3

2022-09-22

Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an attacker to fetch external resources. This issue affects Apache XML Graphics Batik 1.14.

CVE-2022-38708MEDIUMCVSS 6.5EG 9.1

2022-12-19

IBM Cognos Analytics 11.1.7 11.2.0, and 11.2.1 could be vulnerable to a Server-Side Request Forgery Attack (SSRF) attack by constructing URLs from user-controlled data. This could enable attackers to make arbitrary requests to the interna…

CVE-2022-38931HIGHCVSS 8.8EG 8.8

2022-09-20

A Server-Side Request Forgery (SSRF) in fetch_net_file_upload function of baijiacmsV4 v4.1.4 allows remote attackers to force the application to make arbitrary requests via injection of arbitrary URLs into the url parameter.

CVE-2022-39039CRITICALCVSS 9.8EG 9.8

2023-01-03

aEnrich’s a+HRD has inadequate filtering for specific URL parameter. An unauthenticated remote attacker can exploit this vulnerability to send arbitrary HTTP(s) request to launch Server-Side Request Forgery (SSRF) attack, to perform arbi…

CVE-2022-39055MEDIUMCVSS 5.3EG 5.3

2022-10-18

RAVA certificate validation system has inadequate filtering for URL parameter. An unauthenticated remote attacker can perform SSRF attack to discover internal network topology base on query response.

CVE-2022-39211LOWCVSS 3.0EG 3.0

2022-09-16

Nextcloud server is an open source personal cloud platform. In affected versions it was found that locally running webservices can be found and requested erroneously. It is recommended that the Nextcloud Server is upgraded to 23.0.8 or 24.…

CVE-2022-39239MEDIUMCVSS 6.1EG 6.1

2022-09-23

netlify-ipx is an on-Demand image optimization for Netlify using ipx. In versions prior to 1.2.3, an attacker can bypass the source image domain allowlist by sending specially crafted headers, causing the handler to load and return arbitra…

CVE-2022-39241HIGHCVSS 7.6EG 7.6

2022-11-02

Discourse is a platform for community discussion. A malicious admin could use this vulnerability to perform port enumeration on the local host or other hosts on the internal network, as well as against hosts on the Internet. Latest `stable…

CVE-2022-39276LOWCVSS 3.5EG 3.5

2022-11-03

GLPI stands for Gestionnaire Libre de Parc Informatique. GLPI is a Free Asset and IT Management Software package that provides ITIL Service Desk features, licenses tracking and software auditing. Usage of RSS feeds or an external calendar …

CWE-918— Server-Side Request Forgery (SSRF)

CVEs classified under CWE-918page 14 of 48

Map vulnerabilities like CWE-918 to your infrastructure