CVE-2014-9300: CSRF
Cross-site request forgery (CSRF) vulnerability in the cmisbrowser servlet in Content Management Interoperability Service (CMIS) in Alfresco Community Edition before 5.0.a allows remote attackers to hijack the authentication of users for requests that access unauthorized URLs and obtain user credentials via a URL in the url parameter.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-9300?
The severity of CVE-2014-9300 is categorized as a medium risk due to its potential for unauthorized access to user data.
How do I fix CVE-2014-9300?
To fix CVE-2014-9300, update to Alfresco Community Edition version 5.0.b or later to mitigate the CSRF vulnerability.
Who is affected by CVE-2014-9300?
CVE-2014-9300 affects users of Alfresco Community Edition prior to version 5.0.a.
What type of vulnerability is CVE-2014-9300?
CVE-2014-9300 is a cross-site request forgery (CSRF) vulnerability that allows attackers to hijack user authentication.
Can CVE-2014-9300 lead to data breaches?
Yes, CVE-2014-9300 can lead to data breaches by allowing attackers to access unauthorized URLs using hijacked user authentication.