Vulnerabilities > Server-Side Request Forgery (SSRF)

DATE CVE VULNERABILITY TITLE RISK
2020-08-24 CVE-2020-14044 Server-Side Request Forgery (SSRF) vulnerability in Codiad
** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** A Server-Side Request Forgery (SSRF) vulnerability was found in Codiad v1.7.8 and later.
network
low complexity
codiad CWE-918
7.2
2020-08-21 CVE-2020-5775 Server-Side Request Forgery (SSRF) vulnerability in Instructure Canvas Learning Management Service 20200729
Server-Side Request Forgery in Canvas LMS 2020-07-29 allows a remote, unauthenticated attacker to cause the Canvas application to perform HTTP GET requests to arbitrary domains.
network
low complexity
instructure CWE-918
5.8
2020-08-17 CVE-2020-15152 Server-Side Request Forgery (SSRF) vulnerability in Ftp-Srv Project Ftp-Srv
ftp-srv is an npm package which is a modern and extensible FTP server designed to be simple yet configurable.
network
low complexity
ftp-srv-project CWE-918
critical
9.1
2020-08-17 CVE-2020-8226 Server-Side Request Forgery (SSRF) vulnerability in PHPbb
A vulnerability exists in phpBB <v3.2.10 and <v3.3.1 which allowed remote image dimensions check to be used to SSRF.
network
low complexity
phpbb CWE-918
5.8
2020-08-13 CVE-2020-13286 Server-Side Request Forgery (SSRF) vulnerability in Gitlab
For GitLab before 13.0.12, 13.1.6, 13.2.3 user controlled git configuration settings can be modified to result in Server Side Request Forgery.
network
low complexity
gitlab CWE-918
4.3
2020-08-11 CVE-2020-14296 Server-Side Request Forgery (SSRF) vulnerability in Redhat Cloudforms Management Engine 4.7/5.0
Red Hat CloudForms 4.7 and 5 was vulnerable to Server-Side Request Forgery (SSRF) flaw.
network
low complexity
redhat CWE-918
7.1
2020-08-10 CVE-2020-13295 Server-Side Request Forgery (SSRF) vulnerability in Gitlab Runner
For GitLab Runner before 13.0.12, 13.1.6, 13.2.3, by replacing dockerd with a malicious server, the Shared Runner is susceptible to SSRF.
network
low complexity
gitlab CWE-918
8.8
2020-08-09 CVE-2020-16248 Server-Side Request Forgery (SSRF) vulnerability in Prometheus Blackbox Exporter
Prometheus Blackbox Exporter through 0.17.0 allows /probe?target= SSRF.
network
low complexity
prometheus CWE-918
5.8
2020-08-08 CVE-2020-15823 Server-Side Request Forgery (SSRF) vulnerability in Jetbrains Youtrack
JetBrains YouTrack before 2020.2.8873 is vulnerable to SSRF in the Workflow component.
network
low complexity
jetbrains CWE-918
7.5
2020-08-08 CVE-2020-15819 Server-Side Request Forgery (SSRF) vulnerability in Jetbrains Youtrack
JetBrains YouTrack before 2020.2.10643 was vulnerable to SSRF that allowed scanning internal ports.
network
low complexity
jetbrains CWE-918
5.3