CWE-918

A vulnerability classified as critical has been found in kalcaddle KodExplorer up to 4.51.03. Affected is an unknown fun

A vulnerability classified as critical was found in kalcaddle KodExplorer up to 4.51.03. Affected by this vulnerability

A vulnerability was found in automad up to 1.10.9. It has been declared as critical. This vulnerability affects the func

An authenticated administrator is able to prepare an alert that is able to execute an SSRF attack. This is exclusively w

The Request package through 2.88.1 for Node.js allows a bypass of SSRF mitigations via an attacker-controller server tha

Senayan Library Management Systems SLIMS 9 Bulian v9.6.1 is vulnerable to Server Side Request Forgery (SSRF) via admin/m

Discourse is an open-source discussion platform. Prior to version 3.1.0.beta3 of the `beta` and `tests-passed` branches,

Teltonika’s Remote Management System versions prior to 4.10.0 contain a virtual private network (VPN) hub feature for c

Server-Side Request Forgery (SSRF) vulnerability in PhonePe PhonePe Payment Solutions.This issue affects PhonePe Payment

Discourse is an open-source discussion platform. Prior to version 3.1.0.beta3 of the `beta` and `tests-passed` branches,

BigBlueButton is an open-source virtual classroom. BigBlueButton prior to versions 2.6.12 and 2.7.0-rc.1 is vulnerable t

In multiple functions of ChooserActivity.java, there is a possible cross-user media read due to a confused deputy. This

A vulnerability classified as critical was found in DedeCMS 5.7.109. Affected by this vulnerability is an unknown functi

In affected versions of Octopus Deploy it is possible for a low privileged guest user to craft a request that allows enu

A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an unauthenticated

Server-Side Request Forgery (SSRF) vulnerability in Andy Moyle Church Admin.This issue affects Church Admin: from n/a th

Server-Side Request Forgery (SSRF) vulnerability in GiveWP GiveWP – Donation Plugin and Fundraising Platform.This issue

Microsoft Power Apps (online) Spoofing Vulnerability

IBM Cognos Analytics 11.1.7, 11.2.0, and 11.2.1 is vulnerable to server-side request forgery (SSRF). This may allow an a

Server-Side Request Forgery (SSRF) in GitHub repository instantsoft/icms2 prior to 2.16.1.

Server-Side Request Forgery (SSRF) in GitHub repository instantsoft/icms2 prior to 2.16.1-git.

Mastodon is a free, open-source social network server based on ActivityPub. Starting in version 4.2.0-beta1 and prior to

IBM Content Navigator 3.0.13 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attack

perfSONAR before 4.4.6, when performing participant discovery, incorrectly uses an HTTP request header value to determin

isInList in the safeurl-python package before 1.2 for Python has an insufficiently restrictive regular expression for ex

Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Nextcloud Server prior

imgproxy <=3.14.0 is vulnerable to Server-Side Request Forgery (SSRF) due to a lack of sanitization of the imageURL para

An issue in Chamilo v1.11.* up to v1.11.18 allows attackers to execute a Server-Side Request Forgery (SSRF) and obtain i

Skype for Business Elevation of Privilege Vulnerability

EspoCRM is an Open Source CRM (Customer Relationship Management) software. In affected versions there is Server-Side Req

Softnext Mail SQR Expert is an email management platform, it has inadequate filtering for a specific URL parameter withi

Bazarr manages and downloads subtitles. In version 1.2.4, the proxy method in bazarr/bazarr/app/ui.py does not validate

Medusa is an automatic video library manager for TV shows. Versions prior to 1.0.19 are vulnerable to unauthenticated bl

Medusa is an automatic video library manager for TV shows. Versions prior to 1.0.19 are vulnerable to unauthenticated bl

Server-Side Request Forgery (SSRF) vulnerability in API checker of Pandora FMS. Application does not have a check on the

Server-Side Request Forgery (SSRF) vulnerability that could allow a rogue server on the local network to modify its URL

A security issue was discovered in kube-apiserver that allows an aggregated API server to redirect client traffic to an

Haven 5d15944 allows Server-Side Request Forgery (SSRF) via the feed[url]= Feeds functionality. Authenticated users with

Nextcloud mail is an email app for the nextcloud home server platform. In affected versions the SMTP, IMAP and Sieve hos

Directus is a real-time API and App dashboard for managing SQL database content. Directus is vulnerable to Server-Side R

IPv4-mapped IPv6 addresses did not get recognized as "local" by the code and a connection attempt is made. Attackers wit

It was possible to call filesystem and network references using the local LibreOffice instance using manipulated ODT doc

Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prio

A Server-Side Request Forgery (SSRF) in loonflow r2.0.14 allows attackers to force the application to make arbitrary req

A malicious actor who has been authenticated and granted specific permissions in Apache Superset may use the import data

Server-side request forgery vulnerability exists in CONPROSYS HMI System (CHS) versions prior to 3.5.3. A user who can a

Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by a Server-

Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by a Server-

Server-Side Request Forgery (SSRF) in GitHub repository omeka/omeka-s prior to 4.0.2.

Server-Side Request Forgery (SSRF) vulnerability in Code for Recovery 12 Step Meeting List.This issue affects 12 Step Me