← back
CVE-2020-8778

CVE-2020-8778

EPSS 2.6%
Alfresco Enterprise before 5.2.7 and Alfresco Community before 6.2.0 (rb65251d6-b368) has XSS via an uploaded document, when the attacker has write access to a project.
Affected products
n/a · n/a
public PoCs found — 2
cve_referencepacketstormsecurity.com/files/156599/Alfresco-5.2.4-Cross-Site-Scripting.htmlunverifiedexploitdbwww.exploit-db.com/exploits/48162unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://packetstormsecurity.com/files/156599/Alfresco-5.2.4-Cross-Site-Scripting.htmlhttps://gitlab.com/snippets/1937042https://issues.alfresco.com/jira/browse/ALF-22110