Filtered by vendor Alfresco Subscriptions
Filtered by product Alfresco Content Services Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2021-41792 1 Alfresco 2 Alfresco Content Services, Alfresco Transform Services 2024-08-04 5.3 Medium
An issue was discovered in Hyland org.alfresco:alfresco-content-services through 6.2.2.18 and org.alfresco:alfresco-transform-services through 1.3. A crafted HTML file, once uploaded, could trigger an unexpected request by the transformation engine. The response to the request is not available to the attacker, i.e., this is blind SSRF.
CVE-2021-41790 1 Alfresco 1 Alfresco Content Services 2024-08-04 8.8 High
An issue was discovered in Hyland org.alfresco:alfresco-content-services through 7.0.1.2. Script Action execution allows executing scripts uploaded outside of the Data Dictionary. This could allow a logged-in attacker to execute arbitrary code inside a sandboxed environment.