Server-side Request Forgery Vulnerability in Alfresco Community Edition
CVE-2014-9301
Currently unrated
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2014-9301?
A server-side request forgery (SSRF) vulnerability exists in the proxy servlet of Alfresco Community Edition, allowing remote attackers to manipulate the endpoint parameter. This flaw enables attackers to initiate outbound requests to internal servers, perform port scans, and retrieve arbitrary files, raising significant security concerns for exposed systems. Users should ensure they are using versions of Alfresco Community Edition that are patched against this vulnerability to mitigate the associated risks.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.