#cwe-918

共收录 2023 条相关情报。

漏洞预警2026-08-01 发布INFO

Budibase before 3.38.1 contains a server-side request forgery vulnerability in the REST datasource integration that fails to validate HTTP redirects against the IP blacklist. At...

CVE-2026-67311

Budibase before 3.38.1 contains a server-side request forgery vulnerability in the REST datasource integration that fail

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

安全公告2026-08-01 发布INFO

Budibase before 3.38.1 SSRF Blacklist Bypass via HTTP Redirect

CVE-2026-67311

Budibase before 3.38.1 contains a server-side request forgery vulnerability in the REST datasource integration that fail

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-918

安全公告2026-07-31 发布INFO

@apostrophecms/file pretty-URL Vulnerable to Unauthenticated SSRF via Host header

CVE-2026-53607

### Summary When `prettyUrls: true` is enabled on `@apostrophecms/file` (a documented SEO feature for serving uploaded

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #npm #cwe-918 #severity:low

漏洞预警2026-07-31 发布INFO

Contao is an Open Source CMS. From 5.3.35 through 5.3.47 and from 5.7.0-RC1 through 5.7.8, the Feed Reader front-end module passes configured RSS feed URLs from FeedReaderContro...

CVE-2026-57232

Contao is an Open Source CMS. From 5.3.35 through 5.3.47 and from 5.7.0-RC1 through 5.7.8, the Feed Reader front-end mod

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-07-31 发布INFO

Thumbor is an open-source photo thumbnail service by globo.com. Prior to 7.8.0, the ALLOWED_SOURCES configuration passes plain strings to re.match() without escaping dots, so a ...

CVE-2026-53500

Thumbor is an open-source photo thumbnail service by globo.com. Prior to 7.8.0, the ALLOWED_SOURCES configuration passes

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

安全公告2026-07-31 发布INFO

Thumbor treats ALLOWED_SOURCES string patterns as unescaped regex, allowing hostname bypass via wildcard dot

CVE-2026-53500

Thumbor is an open-source photo thumbnail service by globo.com. Prior to 7.8.0, the ALLOWED_SOURCES configuration passes

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-918

安全公告2026-07-31 发布INFO

Server-Side Request Forgery in the PDF export component in maalfer Pentestify before 1.1.0 allows...

CVE-2026-59231

Server-Side Request Forgery in the PDF export component in maalfer Pentestify before 1.1.0 allows authenticated users to

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-918 #severity:medium

安全公告2026-07-31 发布INFO

Contao: Server-Side Request Forgery (SSRF) via Unvalidated RSS Feed URL in Feed Reader Module

CVE-2026-57232

Contao is an Open Source CMS. From 5.3.35 through 5.3.47 and from 5.7.0-RC1 through 5.7.8, the Feed Reader front-end mod

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-918

漏洞预警2026-07-31 发布INFO

DSSRF is a Node.js library that provides a wide range of utilities and advanced SSRF defense checks. Prior to 1.0.5, is_url_safe can treat localhost as safe when DNS resolver 1....

CVE-2026-54729

DSSRF is a Node.js library that provides a wide range of utilities and advanced SSRF defense checks. Prior to 1.0.5, is_

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-07-31 发布INFO

vault-secrets-webhook is a Kubernetes mutating webhook that makes direct secret injection into Pods possible. Prior to 1.23.1, parseVaultConfig() in pkg/webhook/config.go accept...

CVE-2026-54725

vault-secrets-webhook is a Kubernetes mutating webhook that makes direct secret injection into Pods possible. Prior to 1

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

安全公告2026-07-31 发布INFO

vault-addr annotation SSRF -- webhook makes outbound HTTP call to attacker URL during admission; vault-serviceaccount enables cluster-wide SA token theft via TokenRequest API

CVE-2026-54725

vault-secrets-webhook is a Kubernetes mutating webhook that makes direct secret injection into Pods possible. Prior to 1

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-918

安全公告2026-07-31 发布INFO

vault-addr annotation SSRF -- webhook makes outbound HTTP call to attacker URL during admission; vault-serviceaccount enables cluster-wide SA token theft via TokenRequest API

CVE-2026-54725

## Summary The vault-secrets-webhook reads the `vault.security.banzaicloud.io/vault-addr` annotation from any ConfigMap

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #go #cwe-918 #severity:critical

安全公告2026-07-31 发布INFO

dssrf: any users using 1.1.1.1 DNS is impacted by SSRF

CVE-2026-54729

## Summary is_url_safe can treat localhost as safe when DNS resolver 1.1.1.1 returns NXDOMAIN because dns.resolve4 yiel

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #npm #cwe-918 #severity:high

安全公告2026-07-31 发布INFO

Natural Language Toolkit (NLTK): DNS-rebinding SSRF filter bypass in nltk.pathsec.urlopen (nltk.download / nltk.data.load) defeats ENFORCE mode

CVE-2026-12075

### Summary `nltk.pathsec` provides an SSRF filter that NLTK documents as a security control, blocking loopback, private

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #pip #cwe-918 #severity:high

漏洞预警2026-07-31 发布INFO

Server-Side Request Forgery in the PDF export component in maalfer Pentestify before 1.1.0 allows authenticated users to cause outbound HTTP GET requests from the server to arbi...

CVE-2026-59231

Server-Side Request Forgery in the PDF export component in maalfer Pentestify before 1.1.0 allows authenticated users to

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

漏洞预警2026-07-31 发布INFO

A Server-Side Request Forgery (SSRF) vulnerability exists in the generic HTTP source and tool components of Google mcp-toolbox versions 0.3.0 through 1.4.0. While the toolbox im...

CVE-2026-14540

A Server-Side Request Forgery (SSRF) vulnerability exists in the generic HTTP source and tool components of Google mcp-t

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

安全公告2026-07-31 发布INFO

Server-Side Request Forgery via Unrestricted HTTP Redirection in MCP Toolbox

CVE-2026-14540

A Server-Side Request Forgery (SSRF) vulnerability exists in the generic HTTP source and tool components of Google mcp-t

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-918

漏洞预警2026-07-30 发布INFO

WACRM is a self-hostable CRM template for WhatsApp. In 0.7.0 and earlier, the automation send_webhook action in src/lib/automations/engine.ts and its validation in src/lib/autom...

CVE-2026-67530

WACRM is a self-hostable CRM template for WhatsApp. In 0.7.0 and earlier, the automation send_webhook action in src/lib/

历史摘要 · 未重新核验 · NVD

#cve #cwe-918

安全公告2026-07-30 发布INFO

WACRM: SSRF via the automation `send_webhook` action

CVE-2026-67530

WACRM is a self-hostable CRM template for WhatsApp. In 0.7.0 and earlier, the automation send_webhook action in src/lib/

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-918

漏洞预警2026-07-30 发布INFO

Leantime 3.6.2 contains a server-side request forgery and local file inclusion vulnerability that allows authenticated attackers to read internal resources by passing unsanitize...

CVE-2026-66415

Leantime 3.6.2 contains a server-side request forgery and local file inclusion vulnerability that allows authenticated a

历史摘要 · 未重新核验 · NVD

#cve #cwe-918