| Package | Affected versions | Patched versions |
|---|---|---|
| alfresco content services | = 7.0= 7.0.0.1= 7.0.0.2≥ 5.0.0.0, ≤ 5.2.7.11≥ 6.0.0.0, ≤ 6.0.1.9≥ 6.1.0.0, ≤ 6.1.1.10≥ 6.2.0.0, ≤ 6.2.2.18≥ 7.0.1.0, ≤ 7.0.1.2 |
An issue was discovered in Hyland org.alfresco:alfresco-content-services through 7.0.1.2. Script Action execution allows executing scripts uploaded outside of the Data Dictionary. This could allow a logged-in attacker to execute arbitrary code inside a sandboxed environment.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free