CVE-2020-18327

概要

参考情報

• gist.github.com/paatui/a3c7ca8cf12594b437d3854f13d76cb8 · Exploit
• cvedetails.com/vulnerability-list/vendor_id-13372/product_id-27784/opxss-1/Alfresco-Alfresco.html · Third Party Advisory

alfresco のその他の脆弱性

• CVE-2020-8778中 5.4Alfresco Enterprise before 5.2.7 and Alfresco Community before 6.2.0 (rb65251d6-b368) has XSS via an uploaded document, when the attacker ha…
• CVE-2020-8777中 5.4Alfresco Enterprise before 5.2.7 and Alfresco Community before 6.2.0 (rb65251d6-b368) has XSS via a user profile photo, as demonstrated by a…
• CVE-2020-8776中 5.4Alfresco Enterprise before 5.2.7 and Alfresco Community before 6.2.0 (rb65251d6-b368) has XSS via the URL property of a file.
• CVE-2019-19496中 5.4Alfresco Enterprise before 5.2.5 allows stored XSS via an uploaded HTML document.
• CVE-2019-14223中 6.1An issue was discovered in Alfresco Community Edition versions below 5.2.6, 6.0.N and 6.1.N. The Alfresco Share application is vulnerable to…