CVE-2020-25727
The Reset Password add-on before 1.2.0 for Alfresco suffers from CMIS-SQL Injection, which allows a malicious user to inject a query within the email input field.
CVSS 3.1 · 7.5 High
EPSS < 1%
KEV · Not listed
Vendors
Products