CVE-2020-8776 - Alfresco Enterprise before 5.2.7 and Alfresco Community before 6.2.0 (rb65251d6-b368) has XSS via the URL property of a file

MEDIUM

Alfresco Enterprise before 5.2.7 and Alfresco Community before 6.2.0 (rb65251d6-b368) has XSS via the URL property of a file

Published Mar 2, 2020

5.4

MEDIUM

CVSS 3.1

EPSS 2.68%

Alfresco Enterprise before 5.2.7 and Alfresco Community before 6.2.0 (rb65251d6-b368) has XSS via the URL property of a file.

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

Link	Providers	Tags
http://packetstormsecurity.com/files/156599/Alfresco-5.2.4-Cross-Site-Scripting.html		x_refsource_MISCThird Party AdvisoryVDB Entry
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-29624		Advisory
https://gitlab.com/snippets/1937042		x_refsource_MISCExploitThird Party Advisory
https://issues.alfresco.com/jira/browse/ALF-22110		x_refsource_MISCPermissions RequiredVendor Advisory