CVE Vulnerability

CVE-2020-18327

Cross Site Scripting (XSS) vulnerability exists in Alfresco Alfresco Community Edition v5.2.0 via the action parameter in the alfresco/s/admin/admin-nodebrowser API. Fixed in v6.2

4.3 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 8.6 / Impact : 2.9

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

Scope

6.1 /10

CVSS v3.0 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 2.7

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope CHANGED

References
Link Resource
https://www.cvedetails.com/vulnerability-list/vendor_id-13372/product_id-27784/opxss-1/Alfresco-Alfresco.html Third Party Advisory
https://gist.github.com/paatui/a3c7ca8cf12594b437d3854f13d76cb8 Exploit Third Party Advisory
Configurations

Configuration 1

cpe:2.3:a:alfresco:alfresco:5.2:*:*:*:community:*:*:*
Information

Published : 2022-03-04 03:15

Updated : 2022-03-11 02:42

NVD link : CVE-2020-18327

Mitre link : CVE-2020-18327

Products Affected
No products.
CWE
CWE-79