CVE-2021-41790

CVE-2021-41790 affects Hyland org.alfresco:alfresco-content-services up to version 7.0.1.2. The issue is Script Action execution that allows scripts uploaded outside the Data Dictionary to run, potentially enabling a logged-in attacker to execute arbitrary code inside a sandboxed environment. The...

CVE-2021-41792

CVE-2021-41792 affects Hyland Alfresco components: org.alfresco:alfresco-content-services up to 6.2.2.18 and org.alfresco:alfresco-transform-services up to 1.3. A crafted HTML file uploaded to the system could trigger an unexpected request by the transformation engine, with the response not expos...