CVE-2021-41791

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2021-41791
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-41791.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2021-41791
Published
2021-10-21T09:15:08Z
Modified
2026-10-24T10:50:29Z
Severity
  • 5.4 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
Summary
[none]
Details

An issue was discovered in Hyland org.alfresco:share through 7.0.0.2 and org.alfresco:community-share through 7.0. An evasion of the XSS filter for HTML input validation in the Alfresco Share User Interface leads to stored XSS that could be exploited by an attacker (given that he has privileges on the content collaboration features).

Database specific 
{
    "unresolved_ranges":  [
        {
            "cpes":  [
                "cpe:2.3:a:alfresco:share:*:*:*:*:*:*:*:*"
            ],
            "extracted_events":  [
                {
                    "range":  [
                        {
                            "introduced":  "5.0.0.0"
                        },
                        {
                            "last_affected":  "5.2.7.11"
                        },
                        {
                            "introduced":  "5.0.0.0"
                        },
                        {
                            "last_affected":  "5.2.7.11"
                        },
                        {
                            "introduced":  "6.0.1.0"
                        },
                        {
                            "last_affected":  "6.0.1.2"
                        },
                        {
                            "introduced":  "6.0.2.0"
                        },
                        {
                            "last_affected":  "6.2.2.4"
                        },
                        {
                            "introduced":  "6.1.1.0"
                        },
                        {
                            "last_affected":  "6.1.1.2"
                        }
                    ],
                    "source":  "CPE_RANGE"
                }
            ],
            "vendor_product":  "alfresco:share"
        },
        {
            "cpes":  [
                "cpe:2.3:a:alfresco:share:7.0.1:*:*:*:*:*:*:*"
            ],
            "extracted_events":  [
                {
                    "range":  [
                        {
                            "introduced":  "7.0.1"
                        },
                        {
                            "last_affected":  "7.0.1"
                        }
                    ],
                    "source":  "CPE_STRING"
                }
            ],
            "vendor_product":  "alfresco:share"
        }
    ]
}
References

Affected packages

Git
github.com/alfresco/acs-packaging

Affected ranges

Type
GIT
Repo
https://github.com/alfresco/acs-packaging
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last Affected
d1378318882c7158649adbf6188758c2e366e33f
Last Affected
64c931d63f38b4f5c069c1d4979fd63a9789d085
Last Affected
725abb97b69834a3f8f4e1d72ebb580c07403c45
Last Affected
05b86c2cbf821880acc29e191c3e6f218f67751c
Introduced
d1378318882c7158649adbf6188758c2e366e33f
Last Affected
396717c88bbff07f2486804b06c843076c1e789a
Database specific
Show details 
{
    "extracted_events":  [
        {
            "cpe":  "cpe:2.3:a:alfresco:community_share:*:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "0"
                },
                {
                    "last_affected":  "7.0"
                }
            ],
            "source":  "CPE_RANGE"
        },
        {
            "cpe":  "cpe:2.3:a:alfresco:share:*:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "6.0.1.0"
                },
                {
                    "last_affected":  "6.0.1.2"
                }
            ],
            "source":  "CPE_RANGE"
        },
        {
            "cpe":  "cpe:2.3:a:alfresco:share:*:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "6.0.2.0"
                },
                {
                    "last_affected":  "6.2.2.4"
                }
            ],
            "source":  "CPE_RANGE"
        },
        {
            "cpe":  "cpe:2.3:a:alfresco:share:*:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "6.1.1.0"
                },
                {
                    "last_affected":  "6.1.1.2"
                }
            ],
            "source":  "CPE_RANGE"
        },
        {
            "cpe":  "cpe:2.3:a:alfresco:share:7.0:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "7.0"
                },
                {
                    "last_affected":  "7.0"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:alfresco:share:7.0.0.1:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "7.0.0.1"
                },
                {
                    "last_affected":  "7.0.0.1"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:alfresco:share:7.0.0.2:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "7.0.0.2"
                },
                {
                    "last_affected":  "7.0.0.2"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:alfresco:share:7.0.1:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "7.0.1"
                },
                {
                    "last_affected":  "7.0.1"
                }
            ],
            "source":  "CPE_STRING"
        }
    ]
}

Affected versions

6.*
6.2.2.4
7.*
7.0
7.0.0
7.0.0.1
7.0.0.2
7.0.1
acs-packaging-6.*
acs-packaging-6.0.0
acs-packaging-6.0.0-EA1
acs-packaging-6.0.0-RC1
acs-packaging-6.0.0-RC2
acs-packaging-6.0.0-RC3
acs-packaging-6.0.0-RC4
acs-packaging-6.0.0-RC5
acs-packaging-6.0.0-RC6
acs-packaging-6.0.0-testRC3
acs-packaging-6.0.0-testRc4
acs-packaging-6.0.0-testRc6
acs-packaging-6.0.0-testRc7
acs-packaging-6.0.1
acs-packaging-6.0.1.1
acs-packaging-6.0.1.1-RC1
acs-packaging-6.0.1.2
acs-packaging-6.1.0-A1
acs-packaging-6.1.0-A2
acs-packaging-6.1.0-EA1
acs-packaging-6.1.0-EA2
acs-packaging-6.1.0-EA3
acs-packaging-6.1.0-RC2
acs-packaging-6.1.1
acs-packaging-6.1.1-RC1
acs-packaging-6.1.1-RC2
acs-packaging-6.1.1-RC3
acs-packaging-6.1.1.1
acs-packaging-6.1.1.2
acs-packaging-6.2.0-A1
acs-packaging-6.2.0-A2
acs-packaging-6.2.0-A3
acs-packaging-6.2.0-A4
acs-packaging-6.2.0-A5
acs-packaging-6.2.0-A6
acs-packaging-6.2.0-A7
acs-packaging-6.2.0-A8
acs-packaging-6.2.0-RC1
acs-packaging-6.2.0-RC2
acs-packaging-6.2.0-RC3
acs-packaging-6.2.1-A1
acs-packaging-6.2.1-A2
acs-packaging-6.2.1-A3
acs-packaging-6.2.1-A4
acs-packaging-6.2.1-RC1
acs-packaging-6.2.1-RC2
acs-packaging-6.2.1-RC3
acs-packaging-6.2.1-RC4
acs-packaging-6.2.1-RC5
acs-packaging-6.2.1-RC6
acs-packaging-6.2.2
acs-packaging-6.2.2-A1
acs-packaging-6.2.2-A2
acs-packaging-6.2.2-RC1
acs-packaging-6.2.2.1
acs-packaging-6.2.2.2

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-41791.json"
github.com/alfresco/alfresco-community-share

Affected ranges

Type
GIT
Repo
https://github.com/alfresco/alfresco-community-share
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last Affected
5e74a6cd808dd94d257b89e3e734e52b3ce3759c
Database specific
Show details 
{
    "extracted_events":  [
        {
            "cpe":  "cpe:2.3:a:alfresco:community_share:*:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "0"
                },
                {
                    "last_affected":  "7.0"
                }
            ],
            "source":  "CPE_RANGE"
        }
    ]
}

Affected versions

alfresco-share-parent-7.*
alfresco-share-parent-7.0.0
alfresco-share-parent-7.0.0-A10
alfresco-share-parent-7.0.0-A11
alfresco-share-parent-7.0.0-A12
alfresco-share-parent-7.0.0-A13
alfresco-share-parent-7.0.0-A14
alfresco-share-parent-7.0.0-A4
alfresco-share-parent-7.0.0-A5
alfresco-share-parent-7.0.0-A6
alfresco-share-parent-7.0.0-A7
alfresco-share-parent-7.0.0-A8
alfresco-share-parent-7.0.0-M3

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-41791.json"
github.com/alfresco/share

Affected ranges

Type
GIT
Repo
https://github.com/alfresco/share
Events
Introduced
eaaca6f453db6535813e8f6c8a85cb315e7fb91e
Last Affected
77cd2b9afe571861c1f9184cf83650445d31bdc0
Database specific
Show details 
{
    "extracted_events":  [
        {
            "cpe":  "cpe:2.3:a:alfresco:share:7.0:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "7.0"
                },
                {
                    "last_affected":  "7.0"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:alfresco:share:7.0.0.1:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "7.0.0.1"
                },
                {
                    "last_affected":  "7.0.0.1"
                }
            ],
            "source":  "CPE_STRING"
        },
        {
            "cpe":  "cpe:2.3:a:alfresco:share:7.0.0.2:*:*:*:*:*:*:*",
            "range":  [
                {
                    "introduced":  "7.0.0.2"
                },
                {
                    "last_affected":  "7.0.0.2"
                }
            ],
            "source":  "CPE_STRING"
        }
    ]
}

Affected versions

7.*
7.0
7.0.0.1
7.0.0.2

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-41791.json"