CVE-2014-9302

Alfresco CE <5.0.a - SSRF

Title source: llm

Description

Server-side request forgery (SSRF) vulnerability in the cmisbrowser servlet in Content Management Interoperability Service (CMIS) in Alfresco Community Edition 5.0.a and earlier allows remote attackers to trigger outbound requests via a crafted URI in the url parameter.

Exploits (1)

exploitdb WRITEUP VERIFIED

by V. Paulikas · textremotemultiple

https://www.exploit-db.com/exploits/39259

View Code ZIP pw:eip

References (2)

Core 2

Core References

Exploit mailing-list x_refsource_bugtraq

http://seclists.org/bugtraq/2014/Jul/72

Exploit x_refsource_misc

https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20140716-0_Alfresco_Community_Edition_Multiple_SSRF_vulnerabilities_v10.txt

Scores

EPSS 0.0546

EPSS Percentile 90.3%

Details

Status published

Products (1)

alfresco/community_edition < 5.0.a

Published Dec 07, 2014

Tracked Since Feb 18, 2026