CVE-2020-8777
CVE-2020-8777
Alfresco Enterprise before 5.2.7 and Alfresco Community before 6.2.0 (rb65251d6-b368) has XSS via a user profile photo, as demonstrated by a SCRIPT element in an SVG document.
Affected products
n/a · n/apublic PoCs found — 2
cve_referencepacketstormsecurity.com/files/156599/Alfresco-5.2.4-Cross-Site-Scripting.htmlunverifiedexploitdbwww.exploit-db.com/exploits/48162unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Want to know if your infrastructure is exposed to this?
Talk to TrueHacking →