11 matches found
CVE-2019-14223
CVE-2019-14223: Alfresco Share의 오픈 리다이렉트 Alfresco Share 애플리케이션은 조작된 POST 요청을 통한 오픈 리다이렉트Open Redirect 공격에 취약합니다. 공격자는 "failure" 매개변수를 조작하여 피해자를 공격자가 원하는 모든 프로토콜예: http, https, ftp, smb 등을 통해 악성 웹사이트로 리다이렉트할 수 있습니다. NVD 공개 정보: 이 취약점에 대한 공개 정보는 여기에서 확인할 수 있습니다. 개념 증명PoC: 더 많은 세부 정보와 악용 과정은 이 PDF에서...
CVE-2026-26336-PoC
CVE-2026-26336 — Alfresco Share 認証なしファイル読み取り 概要 Alfresco Share は、静的リソースを配信するために /share/page/resource/ エンドポイントを公開しています。脆弱性のあるバージョンでは、このエンドポイントがパストラバーサルを適切に制限しておらず、認証されていない攻撃者が Share Webアプリケーション内（および同じ Tomcat インスタンスにデプロイされた可能性のある兄弟 Webアプリケーション内）の任意のファイルを読み取ることができます。 影響を受けるバージョン Alfresco Community...
Exploit for Incorrect Authorization in Hyland Alfresco_Content_Services
CVE-2026-26336 — Alfresco Share Unauthenticated File Read...
CVE-2021-41791
An issue was discovered in Hyland org.alfresco:share through 7.0.0.2 and org.alfresco:community-share through 7.0. An evasion of the XSS filter for HTML input validation in the Alfresco Share User Interface leads to stored XSS that could be exploited by an attacker given that he has privileges on...
EUVD-2021-28799
Malicious code in bioql PyPI...
VulnCheck KEV: CVE-2019-14223
An issue was discovered in Alfresco Community Edition versions below 5.2.6, 6.0.N and 6.1.N. The Alfresco Share application is vulnerable to an Open Redirect attack via a crafted POST request. By manipulating the POST parameters, an attacker can redirect a victim to a malicious website over any...
CVE-2021-41791
An issue was discovered in Hyland org.alfresco:share through 7.0.0.2 and org.alfresco:community-share through 7.0. An evasion of the XSS filter for HTML input validation in the Alfresco Share User Interface leads to stored XSS that could be exploited by an attacker given that he has privileges on...
Input validation
An issue was discovered in Hyland org.alfresco:share through 7.0.0.2 and org.alfresco:community-share through 7.0. An evasion of the XSS filter for HTML input validation in the Alfresco Share User Interface leads to stored XSS that could be exploited by an attacker given that he has privileges on...
CVE-2021-41791
An issue was discovered in Hyland org.alfresco:share through 7.0.0.2 and org.alfresco:community-share through 7.0. An evasion of the XSS filter for HTML input validation in the Alfresco Share User Interface leads to stored XSS that could be exploited by an attacker given that he has privileges on...
CVE-2019-14223
An issue was discovered in Alfresco Community Edition versions below 5.2.6, 6.0.N and 6.1.N. The Alfresco Share application is vulnerable to an Open Redirect attack via a crafted POST request. By manipulating the POST parameters, an attacker can redirect a victim to a malicious website over any...
CVE-2019-14223
An issue was discovered in Alfresco Community Edition versions below 5.2.6, 6.0.N and 6.1.N. The Alfresco Share application is vulnerable to an Open Redirect attack via a crafted POST request. By manipulating the POST parameters, an attacker can redirect a victim to a malicious website over any...