Remote Code Execution Vulnerability in Alfresco Content Services
CVE-2024-29309

7.7HIGH

Key Information:

Vendor

Alfresco

Vendor
CVE Published:
2 May 2024

What is CVE-2024-29309?

Alfresco Content Services version 23.3.0.7 contains a vulnerability that enables remote attackers to execute arbitrary code via an exploit in the Transfer Service. This vulnerability poses a risk as it can allow unauthorized users to gain control over affected systems, potentially leading to data breaches and other forms of exploitation. Organizations using this version of Alfresco should take immediate steps to assess their exposure and implement appropriate measures to mitigate the risk associated with this vulnerability.

References

https://gist.github.com/Siebene/c22e1a4a4a8b6106718047589...

CVSS V3.1

Score:
7.7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.