| Package | Affected versions | Patched versions |
|---|---|---|
| alfresco content services | ≥ 23.1, ≤ 23.6.0≥ 25.1, ≤ 25.2≥ 7.4.0, ≤ 7.4.2.5< 25.3 | 25.3 |
Hyland Alfresco allows unauthenticated attackers to read arbitrary files from protected directories (like WEB-INF) via the "/share/page/resource/" endpoint, thus leading to the disclosure of sensitive configuration files.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free