What’s Vulnerable › Vulnerabilities

CVE-2020-18327

• Severity: medium (CVSS 6.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2022-03-04 · updated 2026-06-17
• Weakness: CWE-79

Description

Cross Site Scripting (XSS) vulnerability exists in Alfresco Alfresco Community Edition v5.2.0 via the action parameter in the alfresco/s/admin/admin-nodebrowser API. Fixed in v6.2

Affected products

• Alfresco: 5.2

References

• https://gist.github.com/paatui/a3c7ca8cf12594b437d3854f13d76cb8
• https://www.cvedetails.com/vulnerability-list/vendor_id-13372/product_id-27784/opxss-1/Alfresco-Alfresco.html
• https://gist.github.com/paatui/a3c7ca8cf12594b437d3854f13d76cb8
• https://www.cvedetails.com/vulnerability-list/vendor_id-13372/product_id-27784/opxss-1/Alfresco-Alfresco.html

Get alerted when CVE-2020-18327 or the next vulnerability affects your stack