Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Server-side request forgery (SSRF) vulnerability in the proxy servlet in Alfresco Community Edition before 5.0.a allows remote attackers to trigger outbound requests to intranet servers, conduct port scans, and read arbitrary files via a crafted URI in the endpoint parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Alfresco Community Edition 服务器端请求伪造漏洞
Vulnerability Description
Alfresco Community Edition是英国Alfresco公司的一个开源企业内容管理平台的社区版，它支持云存储、移动访问等。 Alfresco Community Edition 5.0.a之前版本的proxy servlet中存在服务器端请求伪造漏洞。远程攻击者可借助‘endpoint’参数中特制的URI利用该漏洞向内网服务器发送outbound请求，进行端口扫描，读取任意文件。
CVSS Information
N/A
Vulnerability Type
N/A