VULNERABILITY INTELLIGENCE

CVE-2021-41790

CVSS score8.8 HIGH

EPSS probability1.47%

CISA KEVNot currently listed

Published2021-10-21

Last modified2026-06-17

Description

An issue was discovered in Hyland org.alfresco:alfresco-content-services through 7.0.1.2. Script Action execution allows executing scripts uploaded outside of the Data Dictionary. This could allow a logged-in attacker to execute arbitrary code inside a sandboxed environment.