1822
Reference Description
CVE-2002-1484 Web server allows attackers to request a URL from another server, including
other ports, which allows proxied scanning.
https://www.cve.org/CVERecord?id=CVE-2002-1484
CVE-2004-2061 CGI script accepts and retrieves incoming URLs.
https://www.cve.org/CVERecord?id=CVE-2004-2061
CVE-2010-1637 Web-based mail program allows internal network scanning using a modified
POP3 port number.
https://www.cve.org/CVERecord?id=CVE-2010-1637
CVE-2009-0037 URL-downloading library automatically follows redirects to file:// and scp://
URLs
https://www.cve.org/CVERecord?id=CVE-2009-0037
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 1337 Weaknesses in the 2021 CWE Top 25 Most Dangerous
Software Weaknesses
1337 2589
MemberOf 1356 OWASP Top Ten 2021 Category A10:2021 - Server-
Side Request Forgery (SSRF)
1344 2497
MemberOf 1387 Weaknesses in the 2022 CWE Top 25 Most Dangerous
Software Weaknesses
1387 2597
MemberOf 1396 Comprehensive Categorization: Access Control 1400 2519
MemberOf 1425 Weaknesses in the 2023 CWE Top 25 Most Dangerous
Software Weaknesses
1425 2600
Notes
Relationship
CWE-918 (SSRF) and CWE-611 (XXE) are closely related, because they both involve webrelated
technologies and can launch outbound requests to unexpected destinations. However,
XXE can be performed client-side, or in other contexts in which the software is not acting directly
as a server, so the "Server" portion of the SSRF acronym does not necessarily apply.
Related Attack Patterns
CAPEC-ID Attack Pattern Name
664 Server Side Request Forgery
References
[REF-913]Alexander Polyakov and Dmitry Chastukhin. "SSRF vs. Business-critical applications:
XXE tunneling in SAP". 2012 July 6. < https://media.blackhat.com/bh-us-12/Briefings/Polyakov/
BH_US_12_Polyakov_SSRF_Business_Slides.pdf >.
[REF-914]Alexander Polyakov, Dmitry Chastukhin and Alexey Tyurin. "SSRF vs. Businesscritical
Applications. Part 1: XXE Tunnelling in SAP NetWeaver". < http://erpscan.com/wp-content/
uploads/2012/08/SSRF-vs-Businness-critical-applications-whitepaper.pdf >.
[REF-915]Riyaz Ahemed Walikar. "Cross Site Port Attacks - XSPA - Part 1". 2012 November 7. <
https://ibreak.software/2012/11/cross-site-port-attacks-xspa-part-1/ >.
[REF-916]Riyaz Ahemed Walikar. "Cross Site Port Attacks - XSPA - Part 2". 2012 November 3. <
https://ibreak.software/2012/11/cross-site-port-attacks-xspa-part-2/ >.
[REF-917]Riyaz Ahemed Walikar. "Cross Site Port Attacks - XSPA - Part 3". 2012 November 4. <
https://ibreak.software/2012/11/cross-site-port-attacks-xspa-part-3/ >.
CWE Version 4.14
CWE-920: Improper Restriction of Power Consumption
CWE-920: Improper Restriction of Power Consumption