Cross-Site Scripting in Alfresco Enterprise and Community Products
CVE-2020-8777

5.4MEDIUM

Key Information:

Vendor: Alfresco
Status: Alfresco
Vendor: CVE Published:; 2 March 2020

What is CVE-2020-8777?

Alfresco's earlier versions of both the Enterprise and Community editions are susceptible to Cross-Site Scripting (XSS) attacks through SVG images used in user profile photos. Potential attackers can exploit this vulnerability by embedding harmful script elements within SVG files, enabling execution of scripts in a victim's browser when they view the infected user profile. This security issue highlights the need for proper input validation and robust security practices to mitigate such web application threats.