CVE-2014-9301

Alfresco Community Edition <5.0.a - SSRF

Title source: llm
STIX 2.1

Description

Server-side request forgery (SSRF) vulnerability in the proxy servlet in Alfresco Community Edition before 5.0.a allows remote attackers to trigger outbound requests to intranet servers, conduct port scans, and read arbitrary files via a crafted URI in the endpoint parameter.

Exploits (2)

exploitdb WRITEUP VERIFIED
by V. Paulikas · textremotemultiple
https://www.exploit-db.com/exploits/39258
nomisec WORKING POC
by ottimo · poc
https://github.com/ottimo/burp-alfresco-referer-proxy-cve-2014-9301

Scores

EPSS 0.0421
EPSS Percentile 88.8%

Details

Status published
Products (1)
alfresco/alfresco < 4.2.f
Published Dec 07, 2014
Tracked Since Feb 18, 2026