CVE-2014-9301 PoC — Alfresco Community Edition 服务器端请求伪造漏洞

Source

https://github.com/ottimo/burp-alfresco-referer-proxy-cve-2014-9301

Associated Vulnerability

Title:Alfresco Community Edition 服务器端请求伪造漏洞 (CVE-2014-9301)
Description:Alfresco Community Edition是英国Alfresco公司的一个开源企业内容管理平台的社区版，它支持云存储、移动访问等。 Alfresco Community Edition 5.0.a之前版本的proxy servlet中存在服务器端请求伪造漏洞。远程攻击者可借助‘endpoint’参数中特制的URI利用该漏洞向内网服务器发送outbound请求，进行端口扫描，读取任意文件。

Readme

# burp-alfresco-referer-proxy-cve-2014-9301

File Snapshot


 [4.0K]  /data/pocs/900a3dd3dd1abe780ff40bf55cbd62e49a36d13f
├── [3.2K]  burp-alfresco-referer-proxy-cve-2014-9301.rb
└── [  43]  README.md

0 directories, 2 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!