Search Vulnerabilities

SvelteKit Denial of service and possible SSRF when using prerendering

Umbraco v8.14.1 - 'baseUrl' SSRF

Nexus Repository 3 - Server-Side Request Forgery in Proxy Repository Configuration

External Control of File Name or Path and Server-Side Request Forgery (SSRF) in Kibana Google Gemini Connector

GetContentFromURL <= 1.0 - Authenticated (Contributor+) Server-Side Request Forgery via 'url' Shortcode Attribute

Microsoft SharePoint Information Disclosure Vulnerability

A Server-Side Request Forgery (SSRF) vulnerability [CWE-918] vulnerability in Fortinet FortiSandbox 5

Metabase channel test endpoint can reach internal local addresses

Fulcio vulnerable to Server-Side Request Forgery (SSRF) via MetaIssuer Regex Bypass

Featured Image from URL (FIFU) <= 5.3.1 - Authenticated (Contributor+) Server-Side Request Forgery via 'fifu_input_url'

Ghost has SSRF via External Media Inliner

Mastodon has SSRF Protection bypass

Miniflux Media Proxy SSRF via /proxy endpoint allows access to internal network resources

WordPress nK Themes Helper plugin <= 1.7.9 - Server Side Request Forgery (SSRF) vulnerability

Mailpit Proxy Endpoint is Vulnerable to Server-Side Request Forgery (SSRF)

INIM Electronics Smartliving SmartLAN/G/SI <=6.x Unauthenticated SSRF via GetImage

LibreChat is vulnerable to Server-Side Request Forgery due to missing restrictions

Knowage is vulnerable to blind server-side request forgery (SSRF)

WordPress External Media plugin <= 1.0.36 - Server Side Request Forgery (SSRF) vulnerability

invoiceninja Migration Import Import.php copy server-side request forgery