CVE-2014-9302

Server-side request forgery (SSRF) vulnerability in the cmisbrowser servlet in Content Management Interoperability Service (CMIS) in Alfresco Community Edition 5.0.a and earlier allows remote attackers to trigger outbound requests via a crafted URI in the url parameter.

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:N

EPSS

2.01% chance of exploitation in the next 30 days, 79th percentile

Published

2014-12-07

Updated

2024-09-17

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/39259

References

• CVE Record
• NVD entry

Related

• CVE-2014-9301
• CVE-2014-9303
• CVE-2014-9265
• CVE-2014-9304
• CVE-2014-9262
• CVE-2014-9305