CVE-2019-14223
06.09.2019, 17:15
An issue was discovered in Alfresco Community Edition versions below 5.2.6, 6.0.N and 6.1.N. The Alfresco Share application is vulnerable to an Open Redirect attack via a crafted POST request. By manipulating the POST parameters, an attacker can redirect a victim to a malicious website over any protocol the attacker desires (e.g.,http, https, ftp, smb, etc.).
Vendor | Product | Version |
---|---|---|
alfresco | alfresco | 𝑥 < 5.2.6 |
alfresco | alfresco | 6.0 |
alfresco | alfresco | 6.1 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References