← Back
CWE-918

3,450 CVEs • Abstraction: Base

Server-Side Request Forgery (SSRF)

The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

JSON object

Loading...

CVEs (3,450)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2025-47791
1Nextcloud
1Nextcloud Server
Jun 17, 2026
May 16, 2025
N/A· v4
5.3 MEDIUM· v3
N/A· v2
Nextcloud Server is a self hosted personal cloud system. In Nextcloud Server prior to 28.0.13, 29.0.10, and 30.0.3 and Nextcloud Enterprise Server prior to 28.0.13, 29.0.10, and 30.0.3, a currently unused endpoint to ver...Show more
Nextcloud Server is a self hosted personal cloud system. In Nextcloud Server prior to 28.0.13, 29.0.10, and 30.0.3 and Nextcloud Enterprise Server prior to 28.0.13, 29.0.10, and 30.0.3, a currently unused endpoint to verify a share recipient was not protected correctly, allowing to proxy requests to another server. The endpoint was removed in Nextcloud Server 28.0.13, 29.0.10, and 30.0.3 and Nextcloud Enterprise Server 28.0.13, 29.0.10, and 30.0.3. No known workarounds are available.Show less
CVE-2024-6584
1Automattic
1Jetpack Boost
Jun 17, 2026
May 15, 2025
N/A· v4
9.1 CRITICAL· v3
N/A· v2
The 'wp_ajax_boost_proxy_ig' action allows administrators to make GET requests to arbitrary URLs.
CVE-2025-40595
-
-
Jun 17, 2026
May 14, 2025
N/A· v4
7.2 HIGH· v3
N/A· v2
A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface. By using an encoded URL, a remote unauthenticated attacker could potentially cause the appliance to ma...Show more
A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface. By using an encoded URL, a remote unauthenticated attacker could potentially cause the appliance to make requests to unintended location.Show less
CVE-2024-13940
-
-
Jun 17, 2026
May 14, 2025
N/A· v4
5.5 MEDIUM· v3
N/A· v2
The Ninja Forms Webhooks plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3.0.7 via the form webhook functionality. This makes it possible for authenticated attacker...Show more
The Ninja Forms Webhooks plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3.0.7 via the form webhook functionality. This makes it possible for authenticated attackers, with Administrator-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services.Show less
CVE-2025-45887
1Wanglongcn
1Yifang
Jun 17, 2026
May 9, 2025
N/A· v4
9.1 CRITICAL· v3
N/A· v2
Yifang CMS v2.0.2 is vulnerable to Server-Side Request Forgery (SSRF) in /api/file/getRemoteContent.
CVE-2025-47733
1Microsoft
1Power Apps
Jun 17, 2026
May 8, 2025
N/A· v4
7.5 HIGH· v3
N/A· v2
Server-Side Request Forgery (SSRF) in Microsoft Power Apps allows an unauthorized attacker to disclose information over a network
CVE-2025-29972
1Microsoft
1Azure Storage Resource Provider
Jun 17, 2026
May 8, 2025
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Server-side request forgery (ssrf) in Azure Storage Resource Provider allows an authorized attacker to perform spoofing over a network.
CVE-2025-47664
1Thimpress
1Wp Pipes
Jun 17, 2026
May 7, 2025
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Server-Side Request Forgery (SSRF) vulnerability in ThimPress WP Pipes allows Server Side Request Forgery. This issue affects WP Pipes: from n/a through 1.4.2.
CVE-2025-47635
1Webinarpress
1Webinarpress
Jun 17, 2026
May 7, 2025
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Server-Side Request Forgery (SSRF) vulnerability in WPWebinarSystem WebinarPress wp-webinarsystem allows Server Side Request Forgery.This issue affects WebinarPress: from n/a through <= 1.33.28.
CVE-2025-47548
1Wbcomdesigns
1Activity Link Preview For Buddypress
Jun 17, 2026
May 7, 2025
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Server-Side Request Forgery (SSRF) vulnerability in Varun Dubey Wbcom Designs - Activity Link Preview For BuddyPress activity-link-preview-for-buddypress allows Server Side Request Forgery.This issue affects Wbcom Design...Show more
Server-Side Request Forgery (SSRF) vulnerability in Varun Dubey Wbcom Designs - Activity Link Preview For BuddyPress activity-link-preview-for-buddypress allows Server Side Request Forgery.This issue affects Wbcom Designs - Activity Link Preview For BuddyPress: from n/a through <= 1.4.4.Show less
CVE-2025-47484
-
-
Jun 17, 2026
May 7, 2025
N/A· v4
6.4 MEDIUM· v3
N/A· v2
Server-Side Request Forgery (SSRF) vulnerability in Oliver Campion Display Remote Posts Block display-remote-posts-block allows Server Side Request Forgery.This issue affects Display Remote Posts Block: from n/a through...Show more
Server-Side Request Forgery (SSRF) vulnerability in Oliver Campion Display Remote Posts Block display-remote-posts-block allows Server Side Request Forgery.This issue affects Display Remote Posts Block: from n/a through <= 1.1.0.Show less
CVE-2025-47483
-
-
Jun 17, 2026
May 7, 2025
N/A· v4
4.9 MEDIUM· v3
N/A· v2
Server-Side Request Forgery (SSRF) vulnerability in Iulia Cazan Easy Replace Image easy-replace-image allows Server Side Request Forgery.This issue affects Easy Replace Image: from n/a through <= 3.5.0.
CVE-2025-47464
-
-
Jun 17, 2026
May 7, 2025
N/A· v4
4.9 MEDIUM· v3
N/A· v2
Server-Side Request Forgery (SSRF) vulnerability in solacewp Solace Extra solace-extra allows Server Side Request Forgery.This issue affects Solace Extra: from n/a through <= 1.3.1.
CVE-2025-45250
1Mrdoc
1Mrdoc
Jun 17, 2026
May 6, 2025
N/A· v4
5.5 MEDIUM· v3
N/A· v2
MrDoc v0.95 and before is vulnerable to Server-Side Request Forgery (SSRF) in the validate_url function of the app_doc/utils.py file.
CVE-2024-55910
1Ibm
1Concert
Jun 17, 2026
May 2, 2025
N/A· v4
6.5 MEDIUM· v3
N/A· v2
IBM Concert Software 1.0.0 through 1.0.5 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumera...Show more
IBM Concert Software 1.0.0 through 1.0.5 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.Show less
CVE-2024-48907
1Sematell
1Replyone
Jun 17, 2026
May 1, 2025
N/A· v4
7.5 HIGH· v3
N/A· v2
Sematell ReplyOne 7.4.3.0 allows SSRF via the application server API.
CVE-2025-46568
1Stirlingpdf
1Stirling Pdf
Jun 17, 2026
May 1, 2025
7.7 HIGH· v4
7.5 HIGH· v3
N/A· v2
Stirling-PDF is a locally hosted web application that allows you to perform various operations on PDF files. Prior to version 0.45.0, Stirling-PDF is vulnerable to SSRF-induced arbitrary file read. WeasyPrint redefines a...Show more
Stirling-PDF is a locally hosted web application that allows you to perform various operations on PDF files. Prior to version 0.45.0, Stirling-PDF is vulnerable to SSRF-induced arbitrary file read. WeasyPrint redefines a set of HTML tags, including img, embed, object, and others. The references to several files inside, allow the attachment of content from any webpage or local file to a PDF. This allows the attacker to read any file on the server, including sensitive files and configuration files. All users utilizing this feature will be affected. This issue has been patched in version 0.45.0.Show less
CVE-2024-13845
1Rocketgenius
1Gravity Forms Webhooks
Jun 17, 2026
May 1, 2025
N/A· v4
5.5 MEDIUM· v3
N/A· v2
The Gravity Forms WebHooks plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.6.0 via the 'process_feed' method of the GF_Webhooks class This makes it possible for a...Show more
The Gravity Forms WebHooks plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.6.0 via the 'process_feed' method of the GF_Webhooks class This makes it possible for authenticated attackers, with Administrator-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services.Show less
CVE-2025-2170
1Sonicwall
1Sma1000 Firmware
Jun 17, 2026
Apr 30, 2025
N/A· v4
7.2 HIGH· v3
N/A· v2
A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface, which in specific conditions could potentially enable a remote unauthenticated attacker to cause the a...Show more
A Server-side request forgery (SSRF) vulnerability has been identified in the SMA1000 Appliance Work Place interface, which in specific conditions could potentially enable a remote unauthenticated attacker to cause the appliance to make requests to an unintended location.Show less
CVE-2023-35817
1Devexpress
1Devexpress
Jun 17, 2026
Apr 28, 2025
N/A· v4
9.8 CRITICAL· v3
N/A· v2
DevExpress before 23.1.3 allows AsyncDownloader SSRF.