CVE-2019-14223

An issue was discovered in Alfresco Community Edition versions below 5.2.6, 6.0.N and 6.1.N. The Alfresco Share application is vulnerable to an Open Redirect attack via a crafted POST request. By manipulating the POST parameters, an attacker can redirect a victim to a malicious website over any protocol the attacker desires (e.g.,http, https, ftp, smb, etc.).

An issue was discovered in Alfresco Community Edition versions below 5.2.6, 6.0.N and 6.1.N. The Alfresco Share application is vulnerable to an Open Redirect attack via a crafted POST request. By manipulating the POST parameters, an attacker can redirect a victim to a malicious website over any protocol the attacker desires (e.g.,http, https, ftp, smb, etc.).

Se descubrió un problema en Alfresco Community Edition versiones inferiores a 5.2.6, 6.0.N y 6.1.N. La aplicación Alfresco Share es vulnerable a un ataque de Redireccionamiento Abierto por medio de una petición POST especialmente diseñada. Mediante la manipulación de los parámetros POST, un atacante puede redireccionar a una víctima a un sitio web malicioso por medio de cualquier protocolo que el atacante desee (p.ej., http, https, ftp, smb, etc.).