Lucene search
PRIOn knowledge basePRION:CVE-2023-49964HistoryDec 11, 2023 - 8:15 a.m.
Design/Logic Flaw
2023-12-1108:15:00
PRIOn knowledge base
www.prio-n.com
3
hyland alfresco community edition
7.2.0
ssti vulnerability
rce
freemarker
cve-2020-12873
An issue was discovered in Hyland Alfresco Community Edition through 7.2.0. By inserting malicious content in the folder.get.html.ftl file, an attacker may perform SSTI (Server-Side Template Injection) attacks, which can leverage FreeMarker exposed objects to bypass restrictions and achieve RCE (Remote Code Execution). NOTE: this issue exists because of an incomplete fix for CVE-2020-12873.
| CPE | Name | Operator | Version |
|---|---|---|---|
| alfresco_content_services | le | 7.2.0 |
Related
cvelist
cvelist
CVE-2023-49964
2023-12-11 00:00:00
CVE-2020-12873
2021-02-19 22:36:14
nvd
nvd
CVE-2023-49964
2023-12-11 08:15:06
CVE-2020-12873
2021-02-19 23:15:12
cve
cve
CVE-2023-49964
2023-12-11 08:15:06
CVE-2020-12873
2021-02-19 23:15:12
prion
prion
Design/Logic Flaw
2021-02-19 23:15:00