Server-side request forgery (ssrf) in Azure SQL Database allows an unauthorized attacker to...
CVE-2026-69502
Server-side request forgery (ssrf) in Azure SQL Database allows an unauthorized attacker to elevate privileges over a ne
#cwe-918
共收录 2015 条相关情报。
← 返回所有主题Server-side request forgery (ssrf) in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-69502
Server-side request forgery (ssrf) in Azure SQL Database allows an unauthorized attacker to elevate privileges over a ne
OpenViking before 0.3.4 contains a server-side request forgery vulnerability that allows authenticated low-privilege attackers to access internal network services by submitting ...
CVE-2026-22681
OpenViking before 0.3.4 contains a server-side request forgery vulnerability that allows authenticated low-privilege att
Headroom's LLM proxy lets a client choose the upstream destination with the x-headroom-base-url request header. _resolve_openai_upstream_base in headroom/proxy/handlers/openai.p...
CVE-2026-77775
Headroom's LLM proxy lets a client choose the upstream destination with the x-headroom-base-url request header. _resolve
The Eventin WordPress plugin before 4.1.21 does not validate a user-supplied webhook URL stored on events nor verify event ownership, allowing users with contributor-level acces...
CVE-2026-13176
The Eventin WordPress plugin before 4.1.21 does not validate a user-supplied webhook URL stored on events nor verify eve
Authenticated pre-validation SSRF vulnerability in Apache CloudStack's template and ISO registration functionality. When registering a template or ISO, CloudStack makes a live ...
CVE-2026-61422
Authenticated pre-validation SSRF vulnerability in Apache CloudStack's template and ISO registration functionality. Whe
Server-Side Request Forgery (SSRF) vulnerability in Apache CloudStack's webhook module, exploitable via webhook delivery requests. This issue affects Apache CloudStack: from 4....
CVE-2026-59085
Server-Side Request Forgery (SSRF) vulnerability in Apache CloudStack's webhook module, exploitable via webhook delivery
SSRF via Metalink Mirror URL Resolution: An authenticated tenant can register a template pointing to an attacker-controlled metalink file containing internal targets. The Secon...
CVE-2026-50112
SSRF via Metalink Mirror URL Resolution: An authenticated tenant can register a template pointing to an attacker-contro
In OpenStack Glance through 32.0.0, the /v2/tasks API accepts type=import tasks that bypass...
CVE-2026-77648
In OpenStack Glance through 32.0.0, the /v2/tasks API accepts type=import tasks that bypass import_filtering_opts, allow
Lightdash stores the webhook URL supplied with a scheduled delivery and later posts to it from...
CVE-2026-72846
Lightdash stores the webhook URL supplied with a scheduled delivery and later posts to it from sendWebhook in packages/b
Server-side request forgery (ssrf) in Azure Active Directory allows an authorized attacker to...
CVE-2026-69851
Server-side request forgery (ssrf) in Azure Active Directory allows an authorized attacker to elevate privileges over a
SitemapLoader.parse_sitemap in langchain_community/document_loaders/sitemap.py applies the...
CVE-2026-72848
SitemapLoader.parse_sitemap in langchain_community/document_loaders/sitemap.py applies the documented restrict_to_same_d
Server-side request forgery (ssrf) in Microsoft Copilot in Azure allows an authorized attacker to...
CVE-2026-69855
Server-side request forgery (ssrf) in Microsoft Copilot in Azure allows an authorized attacker to disclose information o
Server-side request forgery (ssrf) in Azure Virtual Machines allows an authorized attacker to...
CVE-2026-69543
Server-side request forgery (ssrf) in Azure Virtual Machines allows an authorized attacker to elevate privileges over a
Server-side request forgery (ssrf) in Microsoft Exchange Online allows an unauthorized attacker...
CVE-2026-65801
Server-side request forgery (ssrf) in Microsoft Exchange Online allows an unauthorized attacker to elevate privileges ov
Server-side request forgery (ssrf) in Azure Data Factory allows an unauthorized attacker to...
CVE-2026-66800
Server-side request forgery (ssrf) in Azure Data Factory allows an unauthorized attacker to disclose information over a
In OpenStack Glance through 32.0.0, the /v2/tasks API accepts type=import tasks that bypass import_filtering_opts, allowing an admin to fetch internal URLs from the Glance servi...
CVE-2026-77648
CVE-2026-77648 是 OpenStack Glance 组件中的一个服务器端请求伪造（SSRF）漏洞，影响版本直至 32.0.0。漏洞根因在于 /v2/tasks API 接受 type=import 的任务，且该类型的任务在处
A Server-Side Request Forgery (SSRF) vulnerability has been reported in PTC Windchill PDMLink and PTC FlexPLM. The vulnerability may be exploited through the deserialization of ...
CVE-2026-77646
A Server-Side Request Forgery (SSRF) vulnerability has been reported in PTC Windchill PDMLink and PTC FlexPLM. The vulne
The POST /api/provider-nodes/validate route in 9router takes a caller-supplied baseUrl and issues server-side HTTP requests to it, guarding the destination with assertPublicUrl ...
CVE-2026-72860
CVE-2026-72860 是 9router 中的一个服务端请求伪造（SSRF）漏洞，位于 POST /api/provider-nodes/validate 路由。该路由接受用户提供的 baseUrl 并发起服务端 HTTP 请求，本
SitemapLoader.parse_sitemap in langchain_community/document_loaders/sitemap.py applies the documented restrict_to_same_domain control only to leaf url entries. The loop over url...
CVE-2026-72848
SitemapLoader.parse_sitemap in langchain_community/document_loaders/sitemap.py applies the documented restrict_to_same_d