Alfresco Content Services Security Vulnerabilities and Issues — Alfresco Content Services CVE List

Lucene search

AlfrescoAlfresco Content Services

3 matches found

CVE•added 2024/05/02 4:15 p.m.•49 views

CVE-2024-29309

An issue in Alfresco Content Services v.23.3.0.7 allows a remote attacker to execute arbitrary code via the Transfer Service.

7.7CVSS7.8AI score0.02198EPSS

CVE•added 2021/10/21 9:15 a.m.•45 views

CVE-2021-41790

An issue was discovered in Hyland org.alfresco:alfresco-content-services through 7.0.1.2. Script Action execution allows executing scripts uploaded outside of the Data Dictionary. This could allow a logged-in attacker to execute arbitrary code inside a sandboxed environment.

8.8CVSS8.8AI score0.00853EPSS

CVE•added 2021/10/21 9:15 a.m.•43 views

CVE-2021-41792

An issue was discovered in Hyland org.alfresco:alfresco-content-services through 6.2.2.18 and org.alfresco:alfresco-transform-services through 1.3. A crafted HTML file, once uploaded, could trigger an unexpected request by the transformation engine. The response to the request is not available to t...

5.3CVSS5.1AI score0.00198EPSS