Server-Side Request Forgery (SSRF)

The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

CVEs (3,430)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-34473 1Microsoft 1Exchange Server Aug 10, 2026 Jul 14, 2021 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-33213 1Element It 1Http Commander Jun 17, 2026 Jul 14, 2021 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 An SSRF vulnerability in the "Upload from URL" feature in Elements-IT HTTP Commander 5.3.3 allows remote authenticated users to retrieve HTTP and FTP files from the internal server network by inserting an internal addres...Show more An SSRF vulnerability in the "Upload from URL" feature in Elements-IT HTTP Commander 5.3.3 allows remote authenticated users to retrieve HTTP and FTP files from the internal server network by inserting an internal address.Show less
CVE-2020-23079 1Halo 1Halo Jun 17, 2026 Jul 12, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 SSRF vulnerability in Halo <=1.3.2 exists in the SMTP configuration, which can detect the server intranet.
CVE-2021-29102 1Esri 1Arcgis Server Jun 17, 2026 Jul 11, 2021 N/A· v4 9.1 CRITICAL· v3 6.4 MEDIUM· v2 A Server-Side Request Forgery (SSRF) vulnerability in ArcGIS Server Manager version 10.8.1 and below may allow a remote, unauthenticated attacker to forge GET requests to arbitrary URLs from the system, potentially leadi...Show more A Server-Side Request Forgery (SSRF) vulnerability in ArcGIS Server Manager version 10.8.1 and below may allow a remote, unauthenticated attacker to forge GET requests to arbitrary URLs from the system, potentially leading to network enumeration or facilitating other attacks.Show less
CVE-2020-20582 1Mipcms 1Mipcms Jun 17, 2026 Jul 8, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 A server side request forgery (SSRF) vulnerability in /ApiAdminDomainSettings.php of MipCMS 5.0.1 allows attackers to access sensitive information.
CVE-2020-24149 1Secondline 1Podcast Importer Secondline Jun 17, 2026 Jul 7, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Server-side request forgery (SSRF) in the Podcast Importer SecondLine (podcast-importer-secondline) plugin 1.1.4 for WordPress via the podcast_feed parameter in a secondline_import_initialize action to the secondlinepodc...Show more Server-side request forgery (SSRF) in the Podcast Importer SecondLine (podcast-importer-secondline) plugin 1.1.4 for WordPress via the podcast_feed parameter in a secondline_import_initialize action to the secondlinepodcastimport page.Show less
CVE-2020-24148 1Mooveagency 1Import Xml And Rss Feeds Jun 17, 2026 Jul 7, 2021 N/A· v4 9.1 CRITICAL· v3 6.4 MEDIUM· v2 Server-side request forgery (SSRF) in the Import XML and RSS Feeds (import-xml-feed) plugin 2.0.1 for WordPress via the data parameter in a moove_read_xml action.
CVE-2020-24147 1Xylusthemes 1Wp Smart Import Jun 17, 2026 Jul 7, 2021 N/A· v4 9.1 CRITICAL· v3 6.4 MEDIUM· v2 Server-side request forgery (SSR) vulnerability in the WP Smart Import (wp-smart-import) plugin 1.0.0 for WordPress via the file field.
CVE-2020-24142 1Ninjateam 1Video Downloader For Tiktok Jun 17, 2026 Jul 7, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Server-side request forgery in the Video Downloader for TikTok (aka downloader-tiktok) plugin 1.3 for WordPress lets an attacker send crafted requests from the back-end server of a vulnerable web application via the njt-...Show more Server-side request forgery in the Video Downloader for TikTok (aka downloader-tiktok) plugin 1.3 for WordPress lets an attacker send crafted requests from the back-end server of a vulnerable web application via the njt-tk-download-video parameter. It can help identify open ports, local network hosts and execute command on servicesShow less
CVE-2020-24141 1Wp Downloadmanager Project 1Wp Downloadmanager Jun 17, 2026 Jul 7, 2021 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 Server-side request forgery in the WP-DownloadManager plugin 1.68.4 for WordPress lets an attacker send crafted requests from the back-end server of a vulnerable web application via the file_remote parameter to download-...Show more Server-side request forgery in the WP-DownloadManager plugin 1.68.4 for WordPress lets an attacker send crafted requests from the back-end server of a vulnerable web application via the file_remote parameter to download-add.php. It can help identify open ports, local network hosts and execute command on servicesShow less
CVE-2021-35209 1Zimbra 1Collaboration Jun 17, 2026 Jul 2, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 An issue was discovered in ProxyServlet.java in the /proxy servlet in Zimbra Collaboration Suite 8.8 before 8.8.15 Patch 23 and 9.x before 9.0.0 Patch 16. The value of the X-Host header overwrites the value of the Host h...Show more An issue was discovered in ProxyServlet.java in the /proxy servlet in Zimbra Collaboration Suite 8.8 before 8.8.15 Patch 23 and 9.x before 9.0.0 Patch 16. The value of the X-Host header overwrites the value of the Host header in proxied requests. The value of X-Host header is not checked against the whitelist of hosts Zimbra is allowed to proxy to (the zimbraProxyAllowedDomains setting).Show less
CVE-2021-32639 1Nsa 1Emissary Jun 17, 2026 Jul 2, 2021 N/A· v4 9.9 CRITICAL· v3 6.5 MEDIUM· v2 Emissary is a P2P-based, data-driven workflow engine. Emissary version 6.4.0 is vulnerable to Server-Side Request Forgery (SSRF). In particular, the `RegisterPeerAction` endpoint and the `AddChildDirectoryAction` endpoin...Show more Emissary is a P2P-based, data-driven workflow engine. Emissary version 6.4.0 is vulnerable to Server-Side Request Forgery (SSRF). In particular, the `RegisterPeerAction` endpoint and the `AddChildDirectoryAction` endpoint are vulnerable to SSRF. This vulnerability may lead to credential leaks. Emissary version 7.0 contains a patch. As a workaround, disable network access to Emissary from untrusted sources.Show less
CVE-2021-31531 1Zohocorp 1Manageengine Servicedesk Plus Msp Jun 17, 2026 Jun 29, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Zoho ManageEngine ServiceDesk Plus MSP before 10521 is vulnerable to Server-Side Request Forgery (SSRF).
CVE-2020-21788 1Crmeb 1Crmeb Jun 17, 2026 Jun 24, 2021 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 In CRMEB 3.1.0+ strict domain name filtering leads to SSRF(Server-Side Request Forgery). The vulnerable code is in file /crmeb/app/admin/controller/store/CopyTaobao.php.
CVE-2021-32698 1Elabftw 1Elabftw Jun 17, 2026 Jun 21, 2021 N/A· v4 4.9 MEDIUM· v3 4.0 MEDIUM· v2 eLabFTW is an open source electronic lab notebook for research labs. This vulnerability allows an attacker to make GET requests on behalf of the server. It is "blind" because the attacker cannot see the result of the req...Show more eLabFTW is an open source electronic lab notebook for research labs. This vulnerability allows an attacker to make GET requests on behalf of the server. It is "blind" because the attacker cannot see the result of the request. Issue has been patched in eLabFTW 4.0.0.Show less
CVE-2021-34811 1Synology 1Download Station Jun 17, 2026 Jun 18, 2021 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 Server-Side Request Forgery (SSRF) vulnerability in task management component in Synology Download Station before 3.8.16-3566 allows remote authenticated users to access intranet resources via unspecified vectors.
CVE-2021-34808 1Synology 1Media Server Jun 17, 2026 Jun 18, 2021 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 Server-Side Request Forgery (SSRF) vulnerability in cgi component in Synology Media Server before 1.8.3-2881 allows remote attackers to access intranet resources via unspecified vectors.
CVE-2021-20483 1Ibm 1Security Identity Manager Jun 17, 2026 Jun 16, 2021 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 IBM Security Identity Manager 6.0.2 is vulnerable to server-side request forgery (SSRF). By sending a specially crafted request, a remote authenticated attacker could exploit this vulnerability to obtain sensitive data....Show more IBM Security Identity Manager 6.0.2 is vulnerable to server-side request forgery (SSRF). By sending a specially crafted request, a remote authenticated attacker could exploit this vulnerability to obtain sensitive data. IBM X-Force ID: 197591.Show less
CVE-2021-32682 1Std42 1Elfinder Jun 17, 2026 Jun 14, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 elFinder is an open-source file manager for web, written in JavaScript using jQuery UI. Several vulnerabilities affect elFinder 2.1.58. These vulnerabilities can allow an attacker to execute arbitrary code and commands o...Show more elFinder is an open-source file manager for web, written in JavaScript using jQuery UI. Several vulnerabilities affect elFinder 2.1.58. These vulnerabilities can allow an attacker to execute arbitrary code and commands on the server hosting the elFinder PHP connector, even with minimal configuration. The issues were patched in version 2.1.59. As a workaround, ensure the connector is not exposed without authentication.Show less
CVE-2021-22175 1Gitlab 1Gitlab Jun 17, 2026 Jun 11, 2021 N/A· v4 9.8 CRITICAL· v3 6.8 MEDIUM· v2 When requests to the internal network for webhooks are enabled, a server-side request forgery vulnerability in GitLab affecting all versions starting from 10.5 was possible to exploit for an unauthenticated attacker even...Show more When requests to the internal network for webhooks are enabled, a server-side request forgery vulnerability in GitLab affecting all versions starting from 10.5 was possible to exploit for an unauthenticated attacker even on a GitLab instance where registration is disabledShow less

Previous 1...149150151...172 Next