Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CWE-918 (服务端请求伪造(SSRF)) — Vulnerability Class 1481

1481 vulnerabilities classified as CWE-918 (服务端请求伪造(SSRF)). AI Chinese analysis included.

CVE IDTitleCVSSSeverityPublished
CVE-2023-25609 Fortinet FortiManager 代码问题漏洞 — FortiAnalyzer 4.2 Medium2023-06-13
CVE-2023-3188 Server-Side Request Forgery (SSRF) in owncast/owncast — owncast/owncast 7.5 -2023-06-10
CVE-2023-1895 Getwid – Gutenberg Blocks <= 1.8.3 - Authenticated(Subscriber+) Server Side Request Forgery — Getwid – Gutenberg Blocks 8.5 High2023-06-09
CVE-2023-3121 Dahua Smart Parking Management image server-side request forgery — Smart Parking Management 3.5 Low2023-06-06
CVE-2023-3015 yiwent Vip Video Analysis title.php server-side request forgery — Vip Video Analysis 6.3 Medium2023-05-31
CVE-2023-2927 JIZHICMS TemplateController.php index server-side request forgery — JIZHICMS 6.3 Medium2023-05-27
CVE-2023-33184 Blind SSRF in the Nextcloud Mail app on avatar endpoint — security-advisories 3.5 Low2023-05-27
CVE-2023-32348 Teltonika Remote Management System 代码问题漏洞 — Remote Management System 5.8 Medium2023-05-22
CVE-2022-29840 Server Side Request Forgery Vulnerability in Western Digital My Cloud Devices — My Cloud OS 5 5.1 Medium2023-05-10
CVE-2023-24954 Microsoft SharePoint Server Information Disclosure Vulnerability — Microsoft SharePoint Enterprise Server 2016 6.5 Medium2023-05-09
CVE-2023-30444 IBM Watson Machine Learning on Cloud Pak for Data server-side request forgery — Watson Machine Learning on Cloud Pak for Data 7.1 High2023-04-27
CVE-2022-48477 JetBrains Hub 代码问题漏洞 — Hub 4.1 Medium2023-04-24
CVE-2023-2140 Server-Side Request Forgery vulnerability affecting DELMIA Apriso Release 2017 through Release 2022 — DELMIA Apriso 7.5 High2023-04-21
CVE-2023-25504 Apache Superset: Possible SSRF on import datasets — Apache Superset 4.9 Medium2023-04-17
CVE-2023-28288 Microsoft SharePoint Server Spoofing Vulnerability — Microsoft SharePoint Enterprise Server 2016 8.1 High2023-04-11
CVE-2023-1971 yuan1994 tpAdmin Upload.php remote server-side request forgery — tpAdmin 6.3 Medium2023-04-10
CVE-2023-29008 SvelteKit framework has Insufficient CSRF protection for CORS requests — kit 8.8 High2023-04-06
CVE-2023-29010 BudiBase Server-Side Request Forgery vulnerability — budibase 6.5 Medium2023-04-06
CVE-2023-28633 GLPI vulnerable to Blind Server-Side Request Forgery (SSRF) in RSS feeds — glpi 3.5 Low2023-04-05
CVE-2023-1725 SSRF in Infoline Project Management System — Project Management System 9.8 Critical2023-03-30
CVE-2023-25195 Apache Fineract: SSRF template type vulnerability in certain authenticated users — Apache Fineract 8.1 -2023-03-28
CVE-2023-1634 OTCMS URL Parameter info_deal.php UseCurl server-side request forgery — OTCMS 6.3 Medium2023-03-25
CVE-2023-28112 Discourse's SSRF protection missing for some FastImage requests — discourse 5.9 Medium2023-03-17
CVE-2023-28111 Discourse vulnerable to SSRF protection bypass possible with IPv4-mapped IPv6 addresses — discourse 5.7 Medium2023-03-17
CVE-2023-27896 Server Side Request Forgery (SSRF) in the SAP BusinessObjects Business Intelligence platform — BusinessObjects Business Intelligence Platform (Web Services) 6.5 Medium2023-03-14
CVE-2023-27271 Server Side Request Forgery (SSRF) in the SAP BusinessObjects Business Intelligence platform — BusinessObjects Business Intelligence Platform (Web Services) 6.5 Medium2023-03-14
CVE-2023-26459 Server Side Request Forgery (SSRF) vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform — NetWeaver AS for ABAP and ABAP Platform 7.4 High2023-03-14
CVE-2021-36396 Moodle 代码问题漏洞 — Moodle 7.5 -2023-03-06
CVE-2023-26492 Directus vulnerable to Server-Side Request Forgery On File Import — directus 5.0 Medium2023-03-03
CVE-2023-1046 MuYuCMS getFile.html server-side request forgery — MuYuCMS 6.3 Medium2023-02-26

Vulnerabilities classified as CWE-918 (服务端请求伪造(SSRF)) represent 1481 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.