Vulnerabilities > Server-Side Request Forgery (SSRF)

DATE CVE VULNERABILITY TITLE RISK
2023-06-30 CVE-2023-35175 Server-Side Request Forgery (SSRF) vulnerability in HP products
Certain HP LaserJet Pro print products are potentially vulnerable to Potential Remote Code Execution and/or Elevation of Privilege via Server-Side Request Forgery (SSRF) using the Web Service Eventing model.
network
low complexity
hp CWE-918
critical
9.8
2023-06-25 CVE-2023-36661 Server-Side Request Forgery (SSRF) vulnerability in multiple products
Shibboleth XMLTooling before 3.2.4, as used in OpenSAML and Shibboleth Service Provider, allows SSRF via a crafted KeyInfo element.
network
low complexity
shibboleth debian CWE-918
7.5
2023-06-22 CVE-2023-35133 Server-Side Request Forgery (SSRF) vulnerability in Moodle
An issue in the logic used to check 0.0.0.0 against the cURL blocked hosts lists resulted in an SSRF risk.
network
low complexity
moodle CWE-918
7.5
2023-06-20 CVE-2023-26431 Server-Side Request Forgery (SSRF) vulnerability in Open-Xchange Appsuite Backend
IPv4-mapped IPv6 addresses did not get recognized as "local" by the code and a connection attempt is made.
network
low complexity
open-xchange CWE-918
4.3
2023-06-20 CVE-2023-26435 Server-Side Request Forgery (SSRF) vulnerability in Open-Xchange Appsuite Backend
It was possible to call filesystem and network references using the local LibreOffice instance using manipulated ODT documents.
network
low complexity
open-xchange CWE-918
5.0
2023-06-16 CVE-2023-24243 Server-Side Request Forgery (SSRF) vulnerability in Cdata ARC 22.0.8336
CData RSB Connect v22.0.8336 was discovered to contain a Server-Side Request Forgery (SSRF).
network
low complexity
cdata CWE-918
7.5
2023-06-13 CVE-2023-25609 Server-Side Request Forgery (SSRF) vulnerability in Fortinet Fortianalyzer and Fortimanager
A server-side request forgery (SSRF) vulnerability [CWE-918] in FortiManager and FortiAnalyzer GUI 7.2.0 through 7.2.1, 7.0.0 through 7.0.6, 6.4.8 through 6.4.11 may allow a remote and authenticated attacker to access unauthorized files and services on the system via specially crafted web requests.
network
low complexity
fortinet CWE-918
6.5
2023-06-08 CVE-2023-32750 Server-Side Request Forgery (SSRF) vulnerability in Pydio Cells
Pydio Cells through 4.1.2 allows SSRF.
network
low complexity
pydio CWE-918
6.5
2023-06-08 CVE-2023-34959 Server-Side Request Forgery (SSRF) vulnerability in Chamilo LMS
An issue in Chamilo v1.11.* up to v1.11.18 allows attackers to execute a Server-Side Request Forgery (SSRF) and obtain information on the services running on the server via crafted requests in the social and links tools.
network
low complexity
chamilo CWE-918
5.3
2023-06-06 CVE-2023-3121 Server-Side Request Forgery (SSRF) vulnerability in Dahuasecurity Smart Parking Management
A vulnerability has been found in Dahua Smart Parking Management up to 20230528 and classified as problematic.
low complexity
dahuasecurity CWE-918
4.6