Skip to content
OpenAdvisories

Weakness (CWE)

CWE-350: Reliance on Reverse DNS Resolution for a Security-Critical Action

Variant Draft

The product performs reverse DNS resolution on an IP address to obtain the hostname and make a security decision, but it does not properly ensure that the IP address is truly associated with the hostname.

How to prevent it (2 mitigations)

  1. Architecture and Design

    Use other means of identity verification that cannot be simply spoofed. Possibilities include a username/password or certificate.

  2. Implementation

    Perform proper forward and reverse DNS lookups to detect DNS spoofing.

Source: MITRE CWE-350

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.6
    CVE-2026-61568

    @zereight/mcp-gitlab: DNS rebinding reaches local Streamable HTTP MCP transport

    `@zereight/mcp-gitlab` is a Model Context Protocol server for GitLab. Versions prior to 2.1.30 expose the Streamable HTTP MCP endpoint without an effective Host or Origin allowlist. A malicious web page can use DNS rebinding to route browser requests to a vic…

    zereight gitlab-mcp @zereight/mcp-gitlab Web / CMS npm
  • Critical 9.8
    CVE-2026-57123

    PraisonAI: MCP SSE transport binds 0.0.0.0 with no authentication and no Origin validation; bundled SecurityConfig is never wired in

    PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.59, ToolsMCPServer.run_sse and launch_tools_mcp_server bind to 0.0.0.0 and create /sse and /messages/ routes without invoking the available SecurityConfig authentication, origin-validation,…

    Mervin Praison praisonaiagents praisonaiagents PyPI
  • Critical 9.8
    CVE-2026-1490

    Spam protection, Honeypot, Anti-Spam by CleanTalk <= 6.71 - Authorization Bypass via Reverse DNS (PTR record) Spoofing to Unauthenticated Arbitrary Plugin Installation

    The Spam protection, Anti-Spam, FireWall by CleanTalk plugin for WordPress is vulnerable to unauthorized Arbitrary Plugin Installation due to an authorization bypass via reverse DNS (PTR record) spoofing on the 'checkWithoutToken' function in all versions up …

    cleantalk Spam protection, Honeypot, Anti-Spam by CleanTalk Web / CMS
  • Critical 9.3
    CVE-2024-24759 Scanner template

    MindsDB Vulnerable to Bypass of SSRF Protection with DNS Rebinding

    MindsDB is a platform for building artificial intelligence from enterprise data. Prior to version 23.12.4.2, a threat actor can bypass the server-side request forgery protection on the whole website with DNS Rebinding. The vulnerability can also lead to denia…

    MindsDB MindsDB mindsdb PyPI