Lucene search
MitreCVELIST:CVE-2023-49964HistoryDec 11, 2023 - 12:00 a.m.
CVE-2023-49964
2023-12-1100:00:00
mitre
www.cve.org
hyland
alfresco
community edition
server-side template injection
remote code execution
An issue was discovered in Hyland Alfresco Community Edition through 7.2.0. By inserting malicious content in the folder.get.html.ftl file, an attacker may perform SSTI (Server-Side Template Injection) attacks, which can leverage FreeMarker exposed objects to bypass restrictions and achieve RCE (Remote Code Execution). NOTE: this issue exists because of an incomplete fix for CVE-2020-12873.
Related
nvd
nvd
CVE-2023-49964
2023-12-11 08:15:06
CVE-2020-12873
2021-02-19 23:15:12
cve
cve
CVE-2023-49964
2023-12-11 08:15:06
CVE-2020-12873
2021-02-19 23:15:12
prion
prion
Design/Logic Flaw
2023-12-11 08:15:00
Design/Logic Flaw
2021-02-19 23:15:00
cvelist
cvelist
CVE-2020-12873
2021-02-19 22:36:14