CVE-2020-12873

8.8 highEPSS 1.7%

High (8.8) in atlassian alfresco enterprise content management. EPSS 1.7% chance of exploitation in the next 30 days.

An issue was discovered in Alfresco Enterprise Content Management (ECM) before 6.2.1. A user with privileges to edit a FreeMarker template (e.g., a webscript) may execute arbitrary Java code or run arbitrary system commands with the same privileges as the account running Alfresco.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.7% chance of exploitation in the next 30 days; higher than 76% of CVEs (scores of 2026-10-31)
CWE: CWE-74
Published: 2021-02-19
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

atlassian:alfresco_enterprise_content_management

References

https://issues.alfresco.com/jira/browse/MNT-21510
https://securitylab.github.com/advisories/GHSL-2020-039-alfresco
https://issues.alfresco.com/jira/browse/MNT-21510
https://securitylab.github.com/advisories/GHSL-2020-039-alfresco

Check your stack JSON