CVE-2020-8778: Alfresco

Medium severity, CVSS 5.4. EPSS: 2.6% chance of exploitation in the next 30 days.

Alfresco Enterprise before 5.2.7 and Alfresco Community before 6.2.0 (rb65251d6-b368) has XSS via an uploaded document, when the attacker has write access to a project.

Affected products

• Alfresco Alfresco: before 5.2.7 (fixed in 5.2.7); before 6.2.0 (fixed in 6.2.0)

Published 2020-03-02. Last modified 2026-06-17.