CVE-2014-9302

CVE-2014-9302 describes a server-side request forgery (SSRF) in the cmisbrowser servlet of CMIS in Alfresco Community Edition 5.0.a and earlier. The vulnerability allows remote attackers to trigger outbound requests by providing a crafted value in the url parameter. Affected component: cmisbrowse...

PT-2014-8927

Name of the Vulnerable Software and Affected Versions Alfresco Community Edition versions 5.0.a and earlier Description A server-side request forgery SSRF issue exists due to a vulnerability in the cmisbrowser servlet in Content Management Interoperability Service CMIS. This allows remote attacke...

PT-2014-8925

Name of the Vulnerable Software and Affected Versions Alfresco Community Edition versions prior to 5.0.a Description A cross-site request forgery CSRF issue exists in the cmisbrowser servlet in Content Management Interoperability Service CMIS that allows remote attackers to hijack user...

CVE-2014-9300: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the cmisbrowser servlet in Content Management Interoperability Service CMIS in Alfresco Community Edition before 5.0.a allows remote attackers to hijack the authentication of users for requests that access unauthorized URLs and obtain user...

CVE-2014-9302: Undefined Security Weakness

Server-side request forgery SSRF vulnerability in the cmisbrowser servlet in Content Management Interoperability Service CMIS in Alfresco Community Edition 5.0.a and earlier allows remote attackers to trigger outbound requests via a crafted URI in the url parameter...