CVE-2014-9301: SSRF
Server-side request forgery (SSRF) vulnerability in the proxy servlet in Alfresco Community Edition before 5.0.a allows remote attackers to trigger outbound requests to intranet servers, conduct port scans, and read arbitrary files via a crafted URI in the endpoint parameter.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-9301?
CVE-2014-9301 is classified as a medium severity vulnerability that enables server-side request forgery.
How do I fix CVE-2014-9301?
To fix CVE-2014-9301, upgrade Alfresco Community Edition to version 5.0.a or later.
What are the potential impacts of CVE-2014-9301?
CVE-2014-9301 allows attackers to trigger outbound requests, conduct port scans, and access arbitrary files on the server.
Which versions of Alfresco are affected by CVE-2014-9301?
CVE-2014-9301 affects Alfresco Community Edition versions prior to 5.0.a and those up to version 4.2.f inclusive.
What type of attack can CVE-2014-9301 facilitate?
CVE-2014-9301 can facilitate attacks that exploit SSRF to access internal network resources.