Vulnerabilities > CVE-2021-41790 - Unspecified vulnerability in Alfresco Content Services 7.0/7.0.0.1/7.0.0.2
Attack vector
NETWORK Attack complexity
LOW Privileges required
LOW Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
An issue was discovered in Hyland org.alfresco:alfresco-content-services through 7.0.1.2. Script Action execution allows executing scripts uploaded outside of the Data Dictionary. This could allow a logged-in attacker to execute arbitrary code inside a sandboxed environment.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 4 |