CVE-2020-8778 - Alfresco Enterprise before 5.2.7 and Alfresco Community before 6.2.0 (rb65251d6-b368) has XSS via an uploaded document, when the attacker has write access to a project

Back Back to CVE browser

MEDIUM

Alfresco Enterprise before 5.2.7 and Alfresco Community before 6.2.0 (rb65251d6-b368) has XSS via an uploaded document, when the attacker has write access to a project

Published Mar 2, 2020

5.4

MEDIUM

CVSS 3.1

EPSS 2.62%

Description

Alfresco Enterprise before 5.2.7 and Alfresco Community before 6.2.0 (rb65251d6-b368) has XSS via an uploaded document, when the attacker has write access to a project.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (3)

http://packetstormsecurity.com/files/156599/Alfresco-5.2.4-Cross-Site-Scripting.html
x_refsource_MISCThird Party AdvisoryVDB Entry
https://gitlab.com/snippets/1937042
x_refsource_MISCExploitThird Party Advisory
https://issues.alfresco.com/jira/browse/ALF-22110
x_refsource_MISCPermissions RequiredVendor Advisory

Link	Providers	Tags
http://packetstormsecurity.com/files/156599/Alfresco-5.2.4-Cross-Site-Scripting.html		x_refsource_MISCThird Party AdvisoryVDB Entry
https://gitlab.com/snippets/1937042		x_refsource_MISCExploitThird Party Advisory
https://issues.alfresco.com/jira/browse/ALF-22110		x_refsource_MISCPermissions RequiredVendor Advisory