Browse / Server-Side Request Forgery

Server-Side Request Forgery

See it on the mapBypass libraryPayloads

Weaknesses in this class

• Server-Side Request Forgery (SSRF)329

Often found together with

• Information Disclosure53
• Code Execution38

Most upvoted Server-Side Request Forgery reports

AllValidInformativeN/ADuplicate

1. Unsanitized IPFS CID Allows SSRF Against Configured GatewayN/AServer-Side Request Forgery (SSRF) · medium · curl
   34 votes
2. File URL UNC Path Access (Windows SSRF)N/AServer-Side Request Forgery (SSRF) · high · curl
   19 votes
3. Gopher Protocol Command Injection (SSRF Smuggling)N/AServer-Side Request Forgery (SSRF) · high · curl
   9 votes
4. Server-side request forgery (ssrf)N/AServer-Side Request Forgery (SSRF) · medium · Yelp
   5 votes
5. SSRF Possible through /wordpress/xmlrpc.phpN/AServer-Side Request Forgery (SSRF) · Ian Dunn
   3 votes