CWE-918

GLPI stands for Gestionnaire Libre de Parc Informatique and is a Free Asset and IT Management Software package, that pro

GLPI stands for Gestionnaire Libre de Parc Informatique. GLPI is a Free Asset and IT Management Software package that pr

SSRF in editor's proxy via IPv6 link-local address in GitHub repository jgraph/drawio prior to 18.0.5. SSRF to internal

A vulnerability was discovered in GitLab starting with version 12. GitLab was vulnerable to a blind SSRF attack since re

Nextcloud server is an open source personal cloud platform. In affected versions it was found that locally running webse

Server Side Request Forgery (SSRF) vulnerability in All in One SEO Pro plugin <= 4.2.5.1 on WordPress.

In ArangoDB, versions v3.7.0 through v3.9.0-alpha.1 have a feature which allows downloading a Foxx service from a public

The Mailchimp for WooCommerce WordPress plugin before 2.7.2 has an AJAX action that allows high privilege users to perfo

Friendica 2021.01 allows SSRF via parse_url?binurl= for DNS lookups or HTTP requests to arbitrary domain names.

HedgeDoc (formerly known as CodiMD) is an open-source collaborative markdown editor. An attacker is able to receive arbi

Server-Side Request Forgery (SSRF) vulnerability has been detected in the SAP NetWeaver Development Infrastructure Compo

Server Side Request Forgery (SSRF) in Web Compliance Manager in Quest Policy Authority version 8.1.2.200 allows attacker

Accellion FTA 9_12_411 and earlier is affected by SSRF via a crafted POST request to wmProgressstat.html. The fixed vers

Appspace 6.2.4 allows SSRF via the api/v1/core/proxy/jsonprequest url parameter.

A server-side request forgery (SSRF) vulnerability in Upgrade.php of gopeak masterlab 2.1.5, via the 'source' parameter.

MuleSoft is aware of a Server Side Request Forgery vulnerability affecting certain versions of a Mule runtime component

On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, and 12.

The ReplicationHandler (normally registered at "/replication" under a Solr core) in Apache Solr has a "masterUrl" (also

A server-side request forgery (SSRF) vulnerability in the addCustomThemePluginRepository function in index.php in Wonder

A remote server side request forgery (SSRF) remote code execution vulnerability was discovered in Aruba ClearPass Policy

BMC Remedy Mid Tier 9.1SP3 is affected by remote and local file inclusion. Due to the lack of restrictions on what can b

The vSphere Client (HTML5) contains a remote code execution vulnerability due to lack of input validation in the Virtual

Webtools in Brocade SANnav before version 2.1.1 allows unauthenticated users to make requests to arbitrary hosts due to

elFinder is an open-source file manager for web, written in JavaScript using jQuery UI. Several vulnerabilities affect e

Zoho ManageEngine ServiceDesk Plus MSP before 10521 is vulnerable to Server-Side Request Forgery (SSRF).

An issue was discovered in ProxyServlet.java in the /proxy servlet in Zimbra Collaboration Suite 8.8 before 8.8.15 Patch

Server-side request forgery in the Video Downloader for TikTok (aka downloader-tiktok) plugin 1.3 for WordPress lets an

The OnAir2 WordPress theme before 3.9.9.2 and QT KenthaRadio WordPress plugin before 2.0.2 have exposed proxy functional

Nagios XI Docker Wizard before version 1.1.3 is vulnerable to SSRF due to improper sanitation in table_population.php.

eyoucms 1.5.4 lacks sanitization of input data, allowing an attacker to inject a url to trigger blind SSRF via the saveR

A Server-Side Request Forgery vulnerability was found in concrete5 < 8.5.5 that allowed a decimal notation encoded IP ad

The server in Jamf Pro before 10.32.0 has an SSRF vulnerability, aka PI-006352. NOTE: Jamf Nation will also publish an a

The vSphere Web Client (FLEX/Flash) contains an SSRF (Server Side Request Forgery) vulnerability in the vSAN Web Client

An SSRF issue was discovered in SquaredUp for SCOM 5.2.1.6654.

Adding a new pipeline in GoCD server version 21.3.0 has a functionality that could be abused to do an un-intended action

Microsoft Exchange Server Remote Code Execution Vulnerability

The OpenID Connect server implementation for MITREid Connect through 1.3.3 contains a Server Side Request Forgery (SSRF)

Feehi CMS 2.1.1 is affected by a Server-side request forgery (SSRF) vulnerability. When the user modifies the HTTP Refer

Server-side request forgery (SSR) vulnerability in the WP Smart Import (wp-smart-import) plugin 1.0.0 for WordPress via

Server-side request forgery (SSRF) in the Import XML and RSS Feeds (import-xml-feed) plugin 2.0.1 for WordPress via the

A Server-Side Request Forgery (SSRF) vulnerability in ArcGIS Server Manager version 10.8.1 and below may allow a remote,

Microsoft Exchange Server Remote Code Execution Vulnerability

Myucms v2.2.1 contains a server-side request forgery (SSRF) in the component \controller\index.php, which can be exploit

An issue was discovered in Zammad before 4.1.1. SSRF can occur via GitHub or GitLab integration.

A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. Th

A vulnerability in the session validation feature of Cisco Data Center Network Manager (DCNM) could allow an unauthentic

A server-side request forgery (SSRF) (CWE-918) vulnerability in FortiManager and FortiAnalyser GUI 7.0.0, 6.4.5 and belo

Versions prior to 6.4.3.1 contain an authenticated server-side request forgery vulnerability in file upload via URL. Ver

On version 16.0.x before 16.0.1.2, insufficient permission checks may allow authenticated users with guest privileges to

IBM Jazz Team Server products is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attac