Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
server-side request forgery vulnerabilities and exploits
(subscribe to this query)
6.5
CVSSv3
CVE-2023-27163
request-baskets up to v1.2.1 exists to contain a Server-Side Request Forgery (SSRF) via the component /api/baskets/{name}. This vulnerability allows malicious users to access network resources and sensitive information via a crafted API request.
Rbaskets Request Baskets
21 Github repositories
8.8
CVSSv3
CVE-2017-9413
Multiple cross-site request forgery (CSRF) vulnerabilities in the Podcast feature in Subsonic 6.1.1 allow remote malicious users to hijack the authentication of users for requests that (1) subscribe to a podcast via the add parameter to podcastReceiverAdmin.view or (2) update Int...
Subsonic Subsonic 6.1.1
1 EDB exploit
9.8
CVSSv3
CVE-2022-31188
CVAT is an opensource interactive video and image annotation tool for computer vision. Versions before 2.0.0 were found to be subject to a Server-side request forgery (SSRF) vulnerability. Validation has been added to urls used in the affected code path in version 2.0.0. Users ar...
Cvat Cvat
1 EDB exploit
1 Github repository
6.5
CVSSv3
CVE-2018-1042
Moodle 3.x has Server Side Request Forgery in the filepicker.
Moodle Moodle 3.2.2
Moodle Moodle 3.2.4
Moodle Moodle 3.4.0
Moodle Moodle 3.2.6
Moodle Moodle 3.3.0
Moodle Moodle 3.3.1
Moodle Moodle 3.3.2
Moodle Moodle
Moodle Moodle 3.2.0
Moodle Moodle 3.2.1
Moodle Moodle 3.2.3
Moodle Moodle 3.2.5
Moodle Moodle 3.3.3
1 EDB exploit
1 Github repository
9.1
CVSSv3
CVE-2017-14611
SSRF (Server Side Request Forgery) in Cockpit 0.13.0 allows remote malicious users to read arbitrary files or send TCP traffic to intranet hosts via the url parameter, related to use of the discontinued aheinze/fetch_url_contents component.
Agentejo Cockpit 0.13.0
6.3
CVSSv3
CVE-2020-4294
IBM QRadar 7.3.0 to 7.3.3 Patch 2 is vulnerable to Server Side Request Forgery (SSRF). This may allow an authenticated malicious user to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-ForceID: 176404.
Ibm Qradar Security Information And Event Manager 7.3.3
Ibm Qradar Security Information And Event Manager
9.1
CVSSv3
CVE-2018-9302
SSRF (Server Side Request Forgery) in /assets/lib/fuc.js.php in Cockpit 0.4.4 up to and including 0.5.5 allows remote malicious users to read arbitrary files or send TCP traffic to intranet hosts via the url parameter. NOTE: this vulnerability exists because of an incomplete fix ...
Getcockpit Cockpit
1 EDB exploit
7.7
CVSSv3
CVE-2019-7652
TheHive Project UnshortenLink analyzer prior to 1.1, included in Cortex-Analyzers prior to 1.15.2, has SSRF. To exploit the vulnerability, an attacker must create a new analysis, select URL for Data Type, and provide an SSRF payload like "http://127.0.0.1:22" in the Dat...
Thehive-project Cortex-analyzers
1 EDB exploit
7.7
CVSSv3
CVE-2017-7566
MyBB prior to 1.8.11 allows remote malicious users to bypass an SSRF protection mechanism.
Mybb Mybb
NA
CVE-2017-7727
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue in customer-controlled software. Notes: none
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27977
IMAP
local users
CVE-2024-32038
CVE-2023-49963
CVE-2023-22869
CVE-2024-31497
local
CVE-2024-2961
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
3
4
5
6
NEXT »