Server-Side Request Forgery

Every one of the 10 is a mark on the map. Named now: 1 to 10, most at risk first.

1. Plane Server-Side Request Forgery (SSRF) VulnerabilityCVE-2024-31461makeplane · CVSS 9.1 · 0.7% likely

   CWE-918

2. Plane allows server side request forgery via /_next/image endpointCVE-2024-47830makeplane · CVSS 9.3 · 0.6% likely

   CWE-918

3. Plane: SSRF via HTTP redirect in webhook delivery (allow_redirects not set)CVE-2026-105636makeplane · CVSS 9.9 · 0.4% likely

   CWE-918

4. Plane: SSRF via Incomplete IP Validation in Webhook URL SerializerCVE-2026-30242makeplane · CVSS 8.5 · 0.4% likely

   CWE-918

5. Plane: DNS Rebinding Bypass of CVE-2026-30242 SSRF Fix in Webhook DeliveryCVE-2026-104973makeplane · CVSS 7.6 · 0.3% likely

   CWE-918

6. Plane: Incomplete fix of CVE-2026-27706 — SSRF still reachable on: missing is_blocked_ip (CGNAT/multicast) + DNS-rebinding TOCTOUCVE-2026-104977makeplane · CVSS 7.7 · 0.3% likely

   CWE-918

7. Plane: OAuth Avatar Redirect SSRF Leads to Internal Data Exfiltration via Static Asset EndpointCVE-2026-105628makeplane · CVSS 7.6 · 0.3% likely

   CWE-918

8. Plane has a Server-Side Request Forgery (SSRF) in Favicon FetchingCVE-2026-39843makeplane · CVSS 7.7 · 0.3% likely

   CWE-918

9. Plane: SSRF in Gitea OAuthCVE-2026-104976makeplane · CVSS 8.7 · 0.2% likely

   CWE-918

10. Plane Vulnerable to Full Read SSRF via Favicon Fetching in "Add Link" FeatureCVE-2026-27706makeplane · CVSS 7.7 · 0.2% likely

    CWE-918

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.