Priority MEDIUM 45
The Alfresco Reset Password add-on before version 1.2.0 relies on untrusted inputs in a security decision.
FlexSolution
Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
FlexSolution records in CISA KEVNo FlexSolution vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
2 records
TI-2020-15740 CVE-2020-25727 · GHSA-4x9v-x49p-h42h
The Reset Password add-on before 1.2.0 for Alfresco suffers from CMIS-SQL Injection…
Priority LOW 35
The Reset Password add-on before 1.2.0 for Alfresco suffers from CMIS-SQL Injection, which allows a malicious user to inject a query within the email input field.