RSS   Vulnerabilities for 'Community edition'   RSS

2014-12-07
 
CVE-2014-9302

CWE-Other
 

 
Server-side request forgery (SSRF) vulnerability in the cmisbrowser servlet in Content Management Interoperability Service (CMIS) in Alfresco Community Edition 5.0.a and earlier allows remote attackers to trigger outbound requests via a crafted URI in the url parameter.

 
 
CVE-2014-9301

CWE-Other
 

 
Server-side request forgery (SSRF) vulnerability in the proxy servlet in Alfresco Community Edition before 5.0.a allows remote attackers to trigger outbound requests to intranet servers, conduct port scans, and read arbitrary files via a crafted URI in the endpoint parameter.

 
 
CVE-2014-9300

CWE-352
 

 
Cross-site request forgery (CSRF) vulnerability in the cmisbrowser servlet in Content Management Interoperability Service (CMIS) in Alfresco Community Edition before 5.0.a allows remote attackers to hijack the authentication of users for requests that access unauthorized URLs and obtain user credentials via a URL in the url parameter.

 

 >>> Vendor: Alfresco 7 Products
Alfresco
Community edition
Reset password
Alfresco content services
Alfresco transform services
Community share
Share


Copyright 2024, cxsecurity.com

 

Back to Top