Cross-Site Scripting Vulnerability in Alfresco Products
CVE-2020-8776

5.4MEDIUM

Key Information:

Vendor: Alfresco
Status: Alfresco
Vendor: CVE Published:; 2 March 2020

What is CVE-2020-8776?

This vulnerability allows for cross-site scripting (XSS) attacks via the URL property of a file in Alfresco Enterprise prior to version 5.2.7 and Alfresco Community prior to version 6.2.0. Attackers can exploit this flaw by injecting malicious scripts that execute in a user's browser, leading to potential data theft, session hijacking, and unauthorized actions performed under the user's identity. It is crucial for users of affected versions to implement security measures to mitigate the risk of exploitation.