Description
Server-side request forgery (SSRF) vulnerability in the proxy servlet in Alfresco Community Edition before 5.0.a allows remote attackers to trigger outbound requests to intranet servers, conduct port scans, and read arbitrary files via a crafted URI in the endpoint parameter.
Exploits (2)
exploitdb
WRITEUP
VERIFIED
by V. Paulikas · textremotemultiple
https://www.exploit-db.com/exploits/39258
nomisec
WORKING POC
by ottimo · poc
https://github.com/ottimo/burp-alfresco-referer-proxy-cve-2014-9301
References (2)
Core 2
Core References
Exploit mailing-list
x_refsource_bugtraq
http://seclists.org/bugtraq/2014/Jul/72
Scores
EPSS
0.0421
EPSS Percentile
88.8%
Details
Status
published
Products (1)
alfresco/alfresco
< 4.2.f
Published
Dec 07, 2014
Tracked Since
Feb 18, 2026