CVE-2020-8776: XSS
Alfresco Enterprise before 5.2.7 and Alfresco Community before 6.2.0 (rb65251d6-b368) has XSS via the URL property of a file.
Affected Software
Event History
Frequently Asked Questions
What is the severity level of CVE-2020-8776?
The severity level of CVE-2020-8776 is medium.
How does CVE-2020-8776 affect Alfresco Enterprise and Community?
CVE-2020-8776 affects Alfresco Enterprise versions prior to 5.2.7 and Alfresco Community versions prior to 6.2.0.
What is the vulnerability in Alfresco Enterprise and Community?
The vulnerability in Alfresco Enterprise and Community is an XSS (cross-site scripting) vulnerability via the URL property of a file.
How can I fix CVE-2020-8776 in Alfresco Enterprise and Community?
To fix CVE-2020-8776, update Alfresco Enterprise to version 5.2.7 or later, and update Alfresco Community to version 6.2.0 or later.
Where can I find more information about CVE-2020-8776?
You can find more information about CVE-2020-8776 at the following references: [link1](http://packetstormsecurity.com/files/156599/Alfresco-5.2.4-Cross-Site-Scripting.html), [link2](https://gitlab.com/snippets/1937042), [link3](https://issues.alfresco.com/jira/browse/ALF-22110).