Skip to content
OpenAdvisories

Weakness (CWE)

CWE-918: Server-Side Request Forgery

Base Incomplete

The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

How to prevent it (3 mitigations)

  1. Implementation, Operation

    If there is a known list of applications, IP, hostname, and/or domains to which the product is allowed to communicate, then use allowlists to ensure that outgoing requests are restricted to these known entities. The allowlists could be in the application code or possibly enforced by firewalls or network segmentation [REF-1511].

  2. Implementation, Operation

    If the product is expected to be able to connect to arbitrary IP addresses or domains, consider using a denylist that includes private network addresses, internal domain names, etc. The denylist could be in the application code or possibly enforced by firewalls or network segmentation [REF-1511].

  3. Implementation

    Assume all input is malicious. Use an "accept known good" input validation strategy, i.e., use a list of acceptable inputs that strictly conform to specifications. Reject any input that does not strictly conform to specifications, or transform it into something that does.

    When performing input validation, consider all potentially relevant properties, including length, type of input, the full range of acceptable values, missing or extra inputs, syntax, consistency across related fields, and conformance to business rules. As an example of business rule logic, "boat" may be syntactically valid because it only contains alphanumeric characters, but it is not valid if the input is only expected to contain colors such as "red" or "blue."

    Do not rely exclusively on looking for malicious or malformed inputs. This is likely to miss at least one undesirable input, especially if the code's environment changes. This can give attackers enough room to bypass the intended validation. However, denylists can be useful for detecting potential attacks or determining which inputs are so malformed that they should be rejected outright.

    When constructing outgoing requests from input strings, use stringent allowlists that limit the character set based on the expected value of the parameter in the request. This will indirectly limit the scope of an attack, but this technique is less important than proper output encoding and escaping.

Source: MITRE CWE-918

All Critical High Medium Low Exploited only Public exploit

49 results · Clear filters · Feed

  • Medium 6.4
    CVE-2026-119712 Public exploit

    PipesHub before 0.10.0 SSRF via Image URLs in Indexed Documents

    PipesHub before 0.10.0 contains a server-side request forgery vulnerability in ImageParser._fetch_single_url that allows attackers to make the indexing service fetch internal addresses by embedding image URLs in documents. Attackers can supply Markdown or HTM…

    pipeshub-ai pipeshub-ai
  • Medium 4.8
    CVE-2026-71569 Public exploit

    Apache Camel: Camel-A2A Push Notification Webhook Guard Accepts IPv6 Unique Local Addresses Reached Through a Host Name

    Server-Side Request Forgery (SSRF) vulnerability in Apache Camel A2A component. This issue affects Apache Camel: from 4.21.0 before 4.22.2. WebhookUrlValidator classified a push notification webhook host in two places that did not agree. A host written as an …

    Apache Software Foundation Apache Camel
  • Medium 6.4
    CVE-2026-108360 Public exploit

    PhpSpreadsheet: SSRF whitelist bypass via unre-validated HTTP redirect in Drawing::setPath external image loading

    PhpSpreadsheet is a pure PHP library for reading and writing spreadsheet files. Prior to 1.30.7, 2.1.19, 2.4.8, 3.10.8, and 5.10.0, Worksheet\Drawing::setPath validates only the initial external-image URL with setIsWhitelisted when setAllowExternalImages is e…

    PHPOffice PhpSpreadsheet phpoffice/phpspreadsheet Packagist
  • Medium 5.9
    CVE-2026-78163 Public exploit

    Apache Camel: Camel-Docling Unvalidated Message Body Input Source Enables Server-Side Request Forgery and Local File Disclosure

    Server-Side Request Forgery (SSRF), Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') and Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Camel Docling component. This issue affects Apache Camel:…

    Apache Software Foundation Apache Camel
  • Medium 5.0
    CVE-2026-78850 Public exploit

    An issue in Matomo v.5.11.2 allows a remote attacker to obtain sensitive information via the SiteContentDetector / Site…

    matomo matomo Debian Ubuntu
  • Medium 6.5
    CVE-2026-51772 Public exploit

    A Server-Side Request Forgery (SSRF) vulnerability exists in the Image API (v2) of OpenStack Glance. When the show_mult…

    glance Ubuntu
  • Medium 4.3
    CVE-2026-96652 Exploited Public exploit EPSS 12%

    Plex Media Server SSRF

    Plex Media Server before 1.43.3.10861 allows SSRF via '/player/timeline'. An attacker using any X-Plex-Token value can include a full URL in the 'protocol' parameter and force the Plex server to POST to the attacker's chosen destination.

    Plex Media Server
    KEV Oct 20, 2026
  • Medium 6.3
    CVE-2026-63642 Public exploit

    MagicMirror newsfeed Socket.IO notification allows blind server-side request forgery

    MagicMirror² is an open source modular smart mirror platform. Prior to 2.37.0, checkArticleUrl in defaultmodules/newsfeed/node_helper.js accepts the CHECK_ARTICLE_URL notification through the unauthenticated Socket.IO namespace /newsfeed and performs fetch(ur…

    MagicMirrorOrg MagicMirror magicmirror npm
  • Medium 6.5
    CVE-2026-11989 Public exploit

    Bit integrations <= 2.8.7 - Unauthenticated Server-Side Request Forgery via Form Field Upload Mapping

    The Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.8.7 via the upload_attachment. This makes it possible for una…

    bitpressadmin Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation Web / CMS
  • Medium 6.5
    CVE-2026-40564 Public exploit

    Apache Flink Kubernetes Operator: Server-Side Request Forgery and local file access in Kubernetes Operator

    Files or Directories Accessible to External Parties, Server-Side Request Forgery (SSRF) vulnerability in Apache Flink Kubernetes Operator. The FlinkSessionJob jarURI is currently not validated so that it points to user-owned files or addresses.  This lets a u…

    Apache Software Foundation Apache Flink Kubernetes Operator
  • Medium 5.0
    CVE-2026-33234 Public exploit

    AutoGPT: SendEmailBlock's IP blocklist bypass allows SSRF via user-controlled SMTP server

    AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents. In versions 0.1.0 through 0.6.51, SendEmailBlock in autogpt_platform/backend/backend/blocks/email_block.py accepts a user-supplied smtp_…

    Significant-Gravitas AutoGPT
  • Medium 5.5
    CVE-2026-41177 Public exploit

    Squidex has Blind SSRF via file:// Protocol in Restore API leading to Local File Interaction

    Squidex is an open source headless content management system and content management hub. Prior to version 7.23.0, the Squidex Restore API is vulnerable to Blind Server-Side Request Forgery (SSRF). The application fails to validate the URI scheme of the user-s…

    Squidex squidex
  • Medium 4.3
    CVE-2026-33534 Public exploit

    EspoCRM has authenticated SSRF via internal-host validation bypass using alternative IPv4 notation

    EspoCRM is an open source customer relationship management application. Versions 9.3.3 and below have an authenticated Server-Side Request Forgery (SSRF) vulnerability that allows bypassing the internal-host validation logic by using alternative IPv4 represen…

    espocrm espocrm
  • Medium 6.3
    CVE-2026-6111 Public exploit

    FoundationAgents MetaGPT common.py decode_image server-side request forgery

    A security flaw has been discovered in FoundationAgents MetaGPT up to 0.8.1. This impacts the function decode_image of the file metagpt/utils/common.py. The manipulation of the argument img_url_or_b64 results in server-side request forgery. It is possible to …

    FoundationAgents MetaGPT metagpt PyPI
  • Medium 4.8
    CVE-2026-40175 Public exploit

    Axios has Unrestricted Cloud Metadata Exfiltration via Header Injection Chain

    Axios is a promise based HTTP client for the browser and Node.js. Versions prior to 1.15.0 and 0.3.1 are vulnerable to a specific gadget-style attack chain in which prototype pollution in a third-party dependency may be leveraged to inject unsanitized header …

    axios axios node-axios axios Debian Ubuntu npm
  • Medium 5.4
    CVE-2026-34753 Public exploit

    vLLM affected by Server-Side Request Forgery (SSRF) in `download_bytes_from_url `

    vLLM is an inference and serving engine for large language models (LLMs). From 0.16.0 to before 0.19.0, a server-side request forgery (SSRF) vulnerability in download_bytes_from_url allows any actor who can control batch input JSON to make the vLLM batch runn…

    vllm-project vLLM vllm PyPI
  • Medium 6.3
    CVE-2026-5530 Public exploit

    Ollama Model Pull API download.go server-side request forgery

    A flaw has been found in Ollama up to 0.18.1. This issue affects some unknown processing of the file server/download.go of the component Model Pull API. Executing a manipulation can lead to server-side request forgery. The attack can be launched remotely. The…

  • Medium 6.5
    CVE-2026-33693 Public exploit

    Lemmy's Activitypub-Federation has SSRF via 0.0.0.0 bypass in activitypub-federation-rust v4_is_invalid()

    Lemmy is a link aggregator and forum for the fediverse. Prior to version 0.7.0-beta.9, the `v4_is_invalid()` function in `activitypub-federation-rust` (`src/utils.rs`) does not check for `Ipv4Addr::UNSPECIFIED` (0.0.0.0). An unauthenticated attacker controlli…

    LemmyNet lemmy activitypub_federation crates.io
  • Medium 5.5
    CVE-2026-0745 Public exploit

    User Language Switch <= 1.6.10 - Authenticated (Administrator+) Server-Side Request Forgery via 'info_language' Parameter

    The User Language Switch plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.6.10 due to missing URL validation on the 'download_language()' function. This makes it possible for authenticated attackers, wi…

    webilop User Language Switch Web / CMS
  • Medium 6.3
    CVE-2025-13796 Public exploit

    deco-cx apps Parameter analyticsScript.ts AnalyticsScript server-side request forgery

    A security vulnerability has been detected in deco-cx apps up to 0.120.1. Affected by this vulnerability is the function AnalyticsScript of the file website/loaders/analyticsScript.ts of the component Parameter Handler. Such manipulation of the argument url l…

    deco-cx apps
  • Medium 5.1
    CVE-2025-63408 Public exploit

    Local Agent DVR versions thru 6.6.1.0 are vulnerable to directory traversal that allows an unauthenticated local attack…

  • Medium 5.5
    CVE-2025-10874 Public exploit

    Orbit Fox < 3.0.2 - Author+ Server-Side Request Forgery

    The Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More WordPress plugin before 3.0.2 does not limit URLs which may be used for the stock photo import feature, allowing the user to specify arbitrary URLs. This leads to a ser…

    Web / CMS
  • Medium 6.9
    CVE-2025-34282 Public exploit

    ThingsBoard < v4.2.1 SVG Image SSRF

    ThingsBoard versions < 4.2.1 contain a server-side request forgery (SSRF) vulnerability in the dashboard's Image Upload Gallery feature. An attacker can upload a malicious SVG file that references a remote URL. If the server processes the SVG file in a way th…

    ThingsBoard ThingsBoard
  • Medium 4.7
    CVE-2025-55971 Public exploit

    TCL 65C655 Smart TV, running firmware version V8-R75PT01-LF1V269.001116 (Android TV, Kernel 5.4.242+), is vulnerable to…

  • Medium 6.5
    CVE-2025-57055 Public exploit

    WonderCMS 3.5.0 is vulnerable to Server-Side Request Forgery (SSRF) in the custom module installation functionality. An…

  • Medium 5.5
    CVE-2025-45250 Public exploit

    MrDoc v0.95 and before is vulnerable to Server-Side Request Forgery (SSRF) in the validate_url function of the app_doc/…

  • Medium 6.5
    CVE-2025-0184 Public exploit

    Server-Side Request Forgery (SSRF) in langgenius/dify

    A Server-Side Request Forgery (SSRF) vulnerability was identified in langgenius/dify version 0.10.2. The vulnerability occurs in the 'Create Knowledge' section when uploading DOCX files. If an external relationship exists in the DOCX file, the reltype value i…

    langgenius langgenius/dify
  • Medium 5.3
    CVE-2025-24354 Public exploit

    imgproxy is vulnerable to SSRF against 0.0.0.0

    imgproxy is server for resizing, processing, and converting images. Imgproxy does not block the 0.0.0.0 address, even with IMGPROXY_ALLOW_LOOPBACK_SOURCE_ADDRESSES set to false. This can expose services on the local host. This vulnerability is fixed in 3.27.2.

    imgproxy imgproxy github.com/imgproxy/imgproxy/v3 github.com/imgproxy/imgproxy Go
  • Medium 5.4
    CVE-2024-51463 Public exploit

    IBM i server-side request forgery

    IBM i 7.3, 7.4, and 7.5 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.

    IBM i
  • Medium 4.9
    CVE-2024-51665 Public exploit

    WordPress Magical Addons For Elementor plugin <= 1.2.1 - Server Side Request Forgery (SSRF) vulnerability

    Server-Side Request Forgery (SSRF) vulnerability in Noor Alam Magical Addons For Elementor magical-addons-for-elementor allows Server Side Request Forgery.This issue affects Magical Addons For Elementor: from n/a through <= 1.2.1.

    Noor Alam Magical Addons For Elementor
  • Medium 6.9
    CVE-2024-47167 Public exploit

    SSRF in the path parameter of /queue/join in Gradio

    Gradio is an open-source Python package designed for quick prototyping. This vulnerability relates to **Server-Side Request Forgery (SSRF)** in the `/queue/join` endpoint. Gradio’s `async_save_url_to_cache` function allows attackers to force the Gradio server…

    gradio-app gradio gradio PyPI
  • Medium 5.8
    CVE-2024-6095 Public exploit

    SSRF and Partial LFI in /models/apply Endpoint in mudler/localai

    A vulnerability in the /models/apply endpoint of mudler/localai versions 2.15.0 allows for Server-Side Request Forgery (SSRF) and partial Local File Inclusion (LFI). The endpoint supports both http(s):// and file:// schemes, where the latter can lead to LFI. …

    mudler mudler/localai
  • Medium 5.8
    CVE-2024-27564 Public exploit EPSS 41%

    pictureproxy.php in the dirk1983 mm1.ltd source code f9f4bbc allows SSRF via the url parameter. NOTE: the references se…

    dirk1983 mm1.ltd source code
  • Medium 6.5
    CVE-2023-6199 Public exploit

    Book Stack v23.10.2 - LFR via Blind SSRF

    Book Stack version 23.10.2 allows filtering local files on the server. This is possible because the application is vulnerable to SSRF.

    BookStack BookStack
  • Medium 5.1
    CVE-2022-3172 Public exploit

    Kubernetes - API server - Aggregated API server can cause clients to be redirected (SSRF)

    A security issue was discovered in kube-apiserver that allows an aggregated API server to redirect client traffic to any URL. This could lead to the client performing unexpected actions as well as forwarding the client's API server credentials to third partie…

    Kubernetes kube-apiserver kubernetes Debian
  • Medium 6.5
    CVE-2022-41401 Public exploit

    OpenRefine Server-Side Request Forgery vulnerability

    OpenRefine <= v3.5.2 contains a Server-Side Request Forgery (SSRF) vulnerability, which permits unauthorized users to exploit the system, potentially leading to unauthorized access to internal resources and sensitive file disclosure.

    openrefine openrefine org.openrefine:main Debian Ubuntu Maven
  • Medium 6.5
    CVE-2023-32750 Public exploit

    Pydio Cells through 4.1.2 allows SSRF. For longer running processes, Pydio Cells allows for the creation of jobs, which…

  • Medium 6.5
    CVE-2023-23169 Public exploit

    Synapsoft pdfocus 1.17 is vulnerable to local file inclusion and server-side request forgery Directory Traversal.

  • Medium 6.5
    CVE-2023-27163 Public exploit

    request-baskets vulnerable to Server-Side Request Forgery

    request-baskets up to v1.2.1 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /api/baskets/{name}. This vulnerability allows attackers to access network resources and sensitive information via a crafted API request.

    github.com/darklynx/request-baskets Go
  • Medium 6.5
    CVE-2022-36551 Public exploit

    Heartex - Label Studio Community Edition vulnerable to SSRF in the Data Import module

    A Server Side Request Forgery (SSRF) in the Data Import module in Heartex - Label Studio Community Edition versions 1.5.0 and earlier allows an authenticated user to access arbitrary files on the system. Furthermore, self-registration is enabled by default in…

    label-studio PyPI