Cross-Site Scripting Vulnerability in Alfresco Enterprise and Alfresco Community
CVE-2020-8778

5.4MEDIUM

Key Information:

Vendor: Alfresco
Status: Alfresco
Vendor: CVE Published:; 2 March 2020

What is CVE-2020-8778?

An XSS vulnerability exists in Alfresco Enterprise versions prior to 5.2.7 and Alfresco Community versions prior to 6.2.0. This security flaw may be exploited by an attacker who has been granted write access to a project, allowing them to upload a malicious document. When other users interact with this document, their web sessions can be compromised, leading to unauthorized actions or data theft.