What is CVE-2014-9301?

CVE-2014-9301 is a vulnerability in Alfresco. Published 2014-12-07.

Is CVE-2014-9301 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Alfresco

CVE-2014-9301

Server-side request forgery (SSRF) vulnerability in the proxy servlet in Alfresco Community Edition before 5.0.a allows remote attackers to trigger outbound requests to intranet servers, conduct port scans, and read arbitrary files via a crafted URI in the endpoint parameter.

EPSS: 0.039 (89.3th percentile) — read the EPSS interpretation.

Affected products

Alfresco
N/a — versions n/a

Public proof-of-concept exploits

ottimo/burp-alfresco-referer-proxy-cve-2014-9301

References

cve@mitre.org (mailing-list, Exploit, x_refsource_BUGTRAQ)
cve@mitre.org (Exploit, x_refsource_MISC)

Frequently asked questions

What is CVE-2014-9301?: CVE-2014-9301 is a vulnerability in Alfresco. Published 2014-12-07.
Is CVE-2014-9301 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.