Open Redirect Vulnerability in Alfresco Community Edition by Alfresco
CVE-2019-14223

6.1MEDIUM

Key Information:

Vendor

Alfresco

Status
Alfresco
Vendor
CVE Published:
6 September 2019

What is CVE-2019-14223?

A vulnerability exists in certain versions of the Alfresco Community Edition which allows an attacker to exploit the Alfresco Share application through a crafted POST request. The exploitation of this vulnerability can enable an attacker to redirect users to potentially harmful websites, compromising user integrity and security. This flaw affects versions below 5.2.6, as well as 6.0.N and 6.1.N, and can allow malicious actors to manipulate POST parameters, resulting in unauthorized redirects over various protocols, including http, https, ftp, and smb.

References

https://community.alfresco.com/content?filterID=all~objec...
x_refsource_MISC
https://github.com/DrunkenShells/Disclosures/tree/master/...
x_refsource_MISC

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.