CVE-2025-0557
CVSS 3.1 Score 4.3 of 10 (medium)
Details
Published Jan 18, 2025
CWE ID 94
CWE ID 79
Summary
CVE-2025-0557 is a newly disclosed vulnerability that impacts the file /share/s/ of the URL Handler component in Hyland Alfresco Community Edition and Enterprise Edition up to version 6.2.2. This issue is classified as problematic and allows for cross-site scripting attacks, which can be initiated remotely. The exploit for this vulnerability has been made public, increasing the risk for potential attacks. To mitigate this issue, it is strongly recommended to upgrade to version 7.0 of the affected component.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.