CVE-2020-8777

概要

参考情報

• packetstormsecurity.com/files/156599/Alfresco-5.2.4-Cross-Site-Scripting.html · Third Party Advisory
• gitlab.com/snippets/1937042 · Exploit
• issues.alfresco.com/jira/browse/ALF-22110 · Permissions Required

alfresco のその他の脆弱性

• CVE-2020-18327中 6.1Cross Site Scripting (XSS) vulnerability exists in Alfresco Alfresco Community Edition v5.2.0 via the action parameter in the alfresco/s/adm…
• CVE-2020-8778中 5.4Alfresco Enterprise before 5.2.7 and Alfresco Community before 6.2.0 (rb65251d6-b368) has XSS via an uploaded document, when the attacker ha…
• CVE-2020-8776中 5.4Alfresco Enterprise before 5.2.7 and Alfresco Community before 6.2.0 (rb65251d6-b368) has XSS via the URL property of a file.
• CVE-2019-19496中 5.4Alfresco Enterprise before 5.2.5 allows stored XSS via an uploaded HTML document.
• CVE-2019-14223中 6.1An issue was discovered in Alfresco Community Edition versions below 5.2.6, 6.0.N and 6.1.N. The Alfresco Share application is vulnerable to…