CWE-918

Concrete CMS (formerly concrete5) versions 8.5.6 and below and version 9.0.0 allow local IP importing causing the system

Zoho ManageEngine SupportCenter Plus before 11016 is vulnerable to an SSRF attack in ActionExecutor.

VMware Workspace ONE UEM console 20.0.8 prior to 20.0.8.37, 20.11.0 prior to 20.11.0.40, 21.2.0 prior to 21.2.0.27, and

VMware Workspace ONE Access 21.08, 20.10.0.1, and 20.10 and Identity Manager 3.3.5, 3.3.4, and 3.3.3 contain an SSRF vul

Adminer is an open-source database management in a single PHP file. In adminer from version 4.0.0 and before 4.7.9 there

Emissary is a P2P-based, data-driven workflow engine. Emissary version 6.4.0 is vulnerable to Server-Side Request Forger

snipe-it is vulnerable to Server-Side Request Forgery (SSRF)

An SSRF issue in Open Distro for Elasticsearch (ODFE) before 1.13.1.0 allows an existing privileged user to enumerate li

When requests to the internal network for webhooks are enabled, a server-side request forgery vulnerability in GitLab CE

When requests to the internal network for webhooks are enabled, a server-side request forgery vulnerability in GitLab af

eLabFTW is an open source electronic lab notebook for research labs. This vulnerability allows an attacker to make GET r

Redash is a package for data visualization and sharing. In versions 10.0 and priorm the implementation of URL-loading da

An information disclosure via GET request server-side request forgery vulnerability was discovered with the Workplace Se

An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.5 before 14.3.6, all versions start

A Server-Side Request Forgery (SSRF) vulnerability in the EPPUpdateService component of Bitdefender Endpoint Security To

IBM DataPower Gateway V10 and V2018 could allow a local attacker with administrative privileges to execute arbitrary cod

Server-Side Request Forgery (SSRF) vulnerability in webapi component in Synology Video Station before 2.4.10-1632 allows

TinyCheck before commits 9fd360d and ea53de8 allowed an authenticated attacker to send an HTTP GET request to the crafte

All versions of package reportlab are vulnerable to Server-side Request Forgery (SSRF) via img tags. In order to reduce

SSRF in the document conversion component of Webware Webdesktop 5.1.15 allows an attacker to read all files from the ser

spxmanage on certain SpinetiX devices allows requests that access unintended resources because of SSRF and Path Traversa

IBM WebSphere Application Server 7.0, 8.0, and 8.5 is vulnerable to server-side request forgery (SSRF). By sending a spe

OX App Suite 7.10.4 and earlier allows SSRF via a snippet.

IBM Security Identity Manager 6.0.2 is vulnerable to server-side request forgery (SSRF). By sending a specially crafted

An SSRF vulnerability in the "Upload from URL" feature in Elements-IT HTTP Commander 5.3.3 allows remote authenticated u

A server-side request forgery (SSRF) vulnerability in rConfig 3.9.5 has been fixed for 3.9.6. This vulnerability allowed

bookstack is vulnerable to Server-Side Request Forgery (SSRF)

The vCenter Server contains an SSRF (Server Side Request Forgery) vulnerability due to improper validation of URLs in vC

The third party intelligence connector in Securonix SNYPR 6.3.1 Build 184295_0302 allows an authenticated user to obtain

Nagios Enterprises NagiosXI <= 5.8.4 contains a Server-Side Request Forgery (SSRF) vulnerability in schedulereport.php.

In all versions of GitLab CE/EE since version 8.15, a DNS rebinding vulnerability in Gitea Importer may be exploited by

An SSRF issue was discovered in Zoho ManageEngine Applications Manager build 15200.

The package ssrf-agent before 1.0.5 are vulnerable to Server-side Request Forgery (SSRF) via the defaultIpChecker functi

OX App Suite through 7.10.4 allows SSRF via a URL with an @ character in an appsuite/api/oauth/proxy PUT request.

The yoast_seo (aka Yoast SEO) extension before 7.2.1 for TYPO3 allows SSRF via a backend user account.

A SSRF issue was discovered in Concrete CMS through 8.5.5. Users can access forbidden files on their local network. A us

IBM Jazz Foundation products are vulnerable to server side request forgery (SSRF). This may allow an authenticated attac

A Server-side request forgery (SSRF) vulnerability in the ProductConfig servlet in Zoho ManageEngine ADSelfService Plus

IBM Planning Analytics 2.0 could be vulnerable to a Server-Side Request Forgery (SSRF) attack by constucting URLs from u

XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulne

In Apache Dubbo prior to 2.6.9 and 2.7.9, the usage of parseURL method will lead to the bypass of white host check which

An issue was discovered in MB connect line mymbCONNECT24 and mbCONNECT24 software in all versions through V2.6.2 There i

Jellyfin is a free software media system that provides media from a dedicated server to end-user devices via multiple ap

Server-Side Request Forgery (SSRF) vulnerability in cgi component in Synology Media Server before 1.8.3-2881 allows remo

The Telefication WordPress plugin is vulnerable to Open Proxy and Server-Side Request Forgery via the ~/bypass.php file

A Server-side request forgery (SSRF) flaw was found in Ansible Tower in versions before 3.6.5 and before 3.7.2. Function

OX App Suite through 7.10.3 allows SSRF because GET requests are sent to arbitrary domain names with an initial autoconf

A vulnerability was discovered in GitLab versions before 12.2. GitLab was vulnerable to a SSRF attack through the Outbou

IBM Jazz Reporting Service 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to server-side request forgery (SSRF). This may

IBM Jazz Foundation and IBM Engineering products are vulnerable to server-side request forgery (SSRF). This may allow an