Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-747c-3wrr-q63m

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Server-side request forgery (SSRF) vulnerability in the proxy servlet in Alfresco Community Edition before 5.0.a allows remote attackers to trigger outbound requests to intranet servers, conduct port scans, and read arbitrary files via a crafted URI in the endpoint parameter.

Server-side request forgery (SSRF) vulnerability in the proxy servlet in Alfresco Community Edition before 5.0.a allows remote attackers to trigger outbound requests to intranet servers, conduct port scans, and read arbitrary files via a crafted URI in the endpoint parameter.

EPSS

Процентиль: 88%
0.04207
Низкий

Связанные уязвимости

nvd
около 11 лет назад

Server-side request forgery (SSRF) vulnerability in the proxy servlet in Alfresco Community Edition before 5.0.a allows remote attackers to trigger outbound requests to intranet servers, conduct port scans, and read arbitrary files via a crafted URI in the endpoint parameter.

EPSS

Процентиль: 88%
0.04207
Низкий