Spring Boot Admin Server before 4.1.2 contains a server-side request forgery vulnerability that...
CVE-2026-62242
Spring Boot Admin Server before 4.1.2 contains a server-side request forgery vulnerability that allows unauthenticated a
#cwe-918
共收录 2023 条相关情报。
← 返回所有主题A weakness has been identified in mosaxiv clawlet up to 0.2.10. The impacted element is the function web_fetch of the file tools/tool_web_fetch.go of the component IPv4 Handler....
CVE-2026-15619
A weakness has been identified in mosaxiv clawlet up to 0.2.10. The impacted element is the function web_fetch of the fi
Spring Boot Admin Server before 4.1.2 contains a server-side request forgery vulnerability that allows unauthenticated attackers to register instances with attacker-controlled h...
CVE-2026-62242
Spring Boot Admin Server before 4.1.2 contains a server-side request forgery vulnerability that allows unauthenticated a
CrewAI before 1.15.1 contains a server-side request forgery vulnerability in the validate_url function that performs one-shot DNS resolution and blocklist checks before returnin...
CVE-2026-62240
CrewAI 版本低于 1.15.1 存在服务端请求伪造（SSRF）漏洞。漏洞位于 validate_url 函数中，该函数执行一次性的 DNS 解析和黑名单检查，但返回的是原始 URL 未经修改。攻击者可以通过提供重定向到内部地址的 UR
OpenClaw before 2026.6.6 contains a policy bypass vulnerability in browser CDP discovery that accepts blocked WebSocket URLs. Attackers with lower-trust access can reach network...
CVE-2026-62197
OpenClaw 是一个网络策略管理工具，其浏览器 CDP（Chrome DevTools Protocol）发现功能存在策略绕过漏洞。受影响的版本（2026.6.6 之前）在处理 WebSocket URL 时未能正确验证，导致攻击者可以
Laravel-Mediable before 7.0.0 contains a server-side request forgery vulnerability that allows...
CVE-2026-49969
Laravel-Mediable before 7.0.0 contains a server-side request forgery vulnerability that allows remote attackers to issue
LogicalDOC Enterprise Version up to and before v9.1.1 is vulnerable to Server-Side Request...
CVE-2025-45869
LogicalDOC Enterprise Version up to and before v9.1.1 is vulnerable to Server-Side Request Forgery (SSRF). An unauthenti
OpenClaw < 2026.6.6 Policy Bypass via CDP Discovery
CVE-2026-62197
OpenClaw before 2026.6.6 contains a policy bypass vulnerability in browser CDP discovery that accepts blocked WebSocket
CrewAI < 1.15.1 SSRF Filter Bypass via HTTP Redirect in Scrape Tools
CVE-2026-62240
CrewAI before 1.15.1 contains a server-side request forgery vulnerability in the validate_url function that performs one
Laravel-Mediable before 7.0.0 contains a server-side request forgery vulnerability that allows remote attackers to issue arbitrary HTTP requests from the server by supplying unv...
CVE-2026-49969
Laravel-Mediable before 7.0.0 contains a server-side request forgery vulnerability that allows remote attackers to issue
LogicalDOC Enterprise Version up to and before v9.1.1 is vulnerable to Server-Side Request Forgery (SSRF). An unauthenticated attacker can exploit the ShareFileCallback servlet ...
CVE-2025-45869
LogicalDOC Enterprise Version up to and before v9.1.1 is vulnerable to Server-Side Request Forgery (SSRF). An unauthenti
NukeViet: Pre-authentication SSRF via X-Forwarded-Host
CVE-2026-55372
## Summary An unauthenticated attacker can coerce the server into issuing HTTP requests to an attacker-chosen host by s
Decidim: Push subscriptions can be abused for server-side requests
CVE-2026-45573
## Description The push-subscription endpoint stores an attacker-controlled delivery URL, and the notification send pat
Server-Side Request Forgery (SSRF) vulnerability in Themeisle Auto Featured Image (Auto Post Thumbnail) auto-post-thumbnail allows Server Side Request Forgery.This issue affects...
CVE-2026-61970
Server-Side Request Forgery (SSRF) vulnerability in Themeisle Auto Featured Image (Auto Post Thumbnail) auto-post-thumbn
Server-Side Request Forgery (SSRF) vulnerability in bdthemes Instant Image Generator ai-image allows Server Side Request Forgery.This issue affects Instant Image Generator: from...
CVE-2026-57413
Server-Side Request Forgery (SSRF) vulnerability in bdthemes Instant Image Generator ai-image allows Server Side Request
Server-Side Request Forgery (SSRF) vulnerability in WP Swings PDF Generator for WordPress pdf-generator-for-wp allows Server Side Request Forgery.This issue affects PDF Generato...
CVE-2026-57407
Server-Side Request Forgery (SSRF) vulnerability in WP Swings PDF Generator for WordPress pdf-generator-for-wp allows Se
Server-Side Request Forgery (SSRF) vulnerability in denishua WPJAM Basic wpjam-basic allows Server Side Request Forgery.This issue affects WPJAM Basic: from n/a through <= 7.0.
CVE-2026-57372
Server-Side Request Forgery (SSRF) vulnerability in denishua WPJAM Basic wpjam-basic allows Server Side Request Forgery.
Authenticated SSRF in Gravitino JobManager allows server-side HTTP requests to internal network and cloud metadata endpoints via unvalidated job template URIs. A vulnerability i...
CVE-2026-49876
Authenticated SSRF in Gravitino JobManager allows server-side HTTP requests to internal network and cloud metadata endpo
A Server-Side Request Forgery (SSRF) protection bypass existed in the html_to_markdown expansion module of misp-modules. The module attempts to prevent requests to loopback, pr...
CVE-2026-62143
A Server-Side Request Forgery (SSRF) protection bypass existed in the html_to_markdown expansion module of misp-modules.
A vulnerability was detected in kLOsk adloop up to 0.9.0. This vulnerability affects the function...
CVE-2026-15525
A vulnerability was detected in kLOsk adloop up to 0.9.0. This vulnerability affects the function _validate_urls of the