CVE-2015-3366

概要

参考情報

• openwall.com/lists/oss-security/2015/01/29/6
• securityfocus.com/bid/74273
• drupal.org/node/2411501 · Patch
• drupal.org/node/2411523 · Patch

alfresco のその他の脆弱性

• CVE-2020-18327中 6.1Cross Site Scripting (XSS) vulnerability exists in Alfresco Alfresco Community Edition v5.2.0 via the action parameter in the alfresco/s/adm…
• CVE-2020-8778中 5.4Alfresco Enterprise before 5.2.7 and Alfresco Community before 6.2.0 (rb65251d6-b368) has XSS via an uploaded document, when the attacker ha…
• CVE-2020-8777中 5.4Alfresco Enterprise before 5.2.7 and Alfresco Community before 6.2.0 (rb65251d6-b368) has XSS via a user profile photo, as demonstrated by a…
• CVE-2020-8776中 5.4Alfresco Enterprise before 5.2.7 and Alfresco Community before 6.2.0 (rb65251d6-b368) has XSS via the URL property of a file.
• CVE-2019-19496中 5.4Alfresco Enterprise before 5.2.5 allows stored XSS via an uploaded HTML document.