BIT-alfresco-2020-18327

vendorUSosv

view advisory published 2024-03-06Licence: per source

Cross Site Scripting (XSS) vulnerability exists in Alfresco Alfresco Community Edition v5.2.0 via the action parameter in the alfresco/s/admin/admin-nodebrowser API. Fixed in v6.2

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2020-18327US	medium6.1	0.87% (59th)	—	2022-03-04
Cross Site Scripting (XSS) vulnerability exists in Alfresco Alfresco Community Edition v5.2.0 via the action parameter in the alfresco/s/admin/admin-nodebrowser API. Fixed in v6.2

references

External citations — patches, advisories, analysis.

https://gist.github.com/paatui/a3c7ca8cf12594b437d3854f13d76cb8WEB
https://www.cvedetails.com/vulnerability-list/vendor_id-13372/product_id-27784/opxss-1/Alfresco-Alfresco.htmlWEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan