CVE-2020-18327: Alfresco

Medium severity, CVSS 6.1. EPSS: 0.9% chance of exploitation in the next 30 days.

Cross Site Scripting (XSS) vulnerability exists in Alfresco Alfresco Community Edition v5.2.0 via the action parameter in the alfresco/s/admin/admin-nodebrowser API. Fixed in v6.2

Affected products

• Alfresco Alfresco: version 5.2 only

Published 2022-03-04. Last modified 2026-06-17.