57 matches found
CVE-2023-49964
CVE-2023-49964: Alfresco में FreeMarker सर्वर-साइड टेम्पलेट इंजेक्शन हाइलैंड अल्फ्रेस्को कम्युनिटी एडिशन =7.2.0 में एक समस्या खोजी गई थी। folder.get.html.ftl फ़ाइल में दुर्भावनापूर्ण सामग्री डालने से, एक हमलावर SSTI सर्वर-साइड टेम्पलेट इंजेक्शन हमले कर सकता है, जो प्रतिबंधों को बायपास करने और RCE...
CVE-2019-14224
CVE-2019-14224: Execução Remota de Código Autenticada no Alfresco Community Ao aproveitar múltiplos componentes nas aplicações do Alfresco Software, foi observada uma cadeia de exploração que permite a um atacante alcançar execução remota de código. O atacante deve usar o Alfresco para: Carregar...
CVE-2019-14222
CVE-2019-14222: Alfresco Community में डिफ़ॉल्ट प्रमाणपत्र Alfresco Community 5.x और इससे नीचे के संस्करण डिफ़ॉल्ट रूप से ज्ञात निजी प्रमाणपत्रों का एक सेट लेकर आते हैं। कोई भी व्यक्ति जो स्थानीय मशीन पर Alfresco Community सॉफ़्टवेयर डाउनलोड और इंस्टॉल करता है, उसे इन फ़ाइलों तक पहुंच मिल जाती है...
EUVD-2020-10251
Malware in sbrugna...
EUVD-2019-5471
Malware in sbrugna...
EUVD-2019-5469
Malware in sbrugna...
EUVD-2014-9127
Malware in sbrugna...
EUVD-2014-9126
Malware in sbrugna...
EUVD-2020-29624
Malware in sbrugna...
CVE-2025-0557
A vulnerability classified as problematic has been found in Hyland Alfresco Community Edition and Alfresco Enterprise Edition up to 6.2.2. This affects an unknown part of the file /share/s/ of the component URL Handler. The manipulation leads to cross site scripting. It is possible to initiate th...
CVE-2020-8778
Alfresco Enterprise before 5.2.7 and Alfresco Community before 6.2.0 rb65251d6-b368 has XSS via an uploaded document, when the attacker has write access to a project...
CVE-2020-18327
Cross Site Scripting XSS vulnerability exists in Alfresco Alfresco Community Edition v5.2.0 via the action parameter in the alfresco/s/admin/admin-nodebrowser API. Fixed in v6.2...
CVE-2014-9302
Server-side request forgery SSRF vulnerability in the cmisbrowser servlet in Content Management Interoperability Service CMIS in Alfresco Community Edition 5.0.a and earlier allows remote attackers to trigger outbound requests via a crafted URI in the url parameter...
CVE-2014-9301
Server-side request forgery SSRF vulnerability in the proxy servlet in Alfresco Community Edition before 5.0.a allows remote attackers to trigger outbound requests to intranet servers, conduct port scans, and read arbitrary files via a crafted URI in the endpoint parameter...
CVE-2019-14222
An issue was discovered in Alfresco Community Edition versions 6.0 and lower. An unauthenticated, remote attacker could authenticate to Alfresco's Solr Web Admin Interface. The vulnerability is due to the presence of a default private key that is present in all default installations. An attacker...
CVE-2019-14224
An issue was discovered in Alfresco Community Edition 5.2 201707. By leveraging multiple components in the Alfresco Software applications, an exploit chain was observed that allows an attacker to achieve remote code execution on the victim machine. The attacker must upload malicious Solr...
CVE-2019-14223
An issue was discovered in Alfresco Community Edition versions below 5.2.6, 6.0.N and 6.1.N. The Alfresco Share application is vulnerable to an Open Redirect attack via a crafted POST request. By manipulating the POST parameters, an attacker can redirect a victim to a malicious website over any...
CVE-2014-9300
Cross-site request forgery CSRF vulnerability in the cmisbrowser servlet in Content Management Interoperability Service CMIS in Alfresco Community Edition before 5.0.a allows remote attackers to hijack the authentication of users for requests that access unauthorized URLs and obtain user...
