{
  "affected": [
    {
      "ranges": [
        {
          "database_specific": {
            "cpe": [
              "cpe:2.3:a:alfresco:community_share:*:*:*:*:*:*:*:*",
              "cpe:2.3:a:alfresco:share:*:*:*:*:*:*:*:*",
              "cpe:2.3:a:alfresco:share:7.0:*:*:*:*:*:*:*",
              "cpe:2.3:a:alfresco:share:7.0.0.1:*:*:*:*:*:*:*",
              "cpe:2.3:a:alfresco:share:7.0.0.2:*:*:*:*:*:*:*",
              "cpe:2.3:a:alfresco:share:7.0.1:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
              {
                "introduced": "0"
              },
              {
                "last_affected": "7.0"
              },
              {
                "introduced": "6.0.1.0"
              },
              {
                "last_affected": "6.0.1.2"
              },
              {
                "introduced": "6.0.2.0"
              },
              {
                "last_affected": "6.2.2.4"
              },
              {
                "introduced": "6.1.1.0"
              },
              {
                "last_affected": "6.1.1.2"
              },
              {
                "introduced": "7.0"
              },
              {
                "introduced": "7.0.0.1"
              },
              {
                "last_affected": "7.0.0.1"
              },
              {
                "introduced": "7.0.0.2"
              },
              {
                "last_affected": "7.0.0.2"
              },
              {
                "introduced": "7.0.1"
              },
              {
                "last_affected": "7.0.1"
              }
            ],
            "source": [
              "CPE_RANGE",
              "CPE_STRING"
            ]
          },
          "events": [
            {
              "introduced": "0"
            },
            {
              "last_affected": "d1378318882c7158649adbf6188758c2e366e33f"
            },
            {
              "last_affected": "64c931d63f38b4f5c069c1d4979fd63a9789d085"
            },
            {
              "last_affected": "725abb97b69834a3f8f4e1d72ebb580c07403c45"
            },
            {
              "last_affected": "05b86c2cbf821880acc29e191c3e6f218f67751c"
            },
            {
              "introduced": "d1378318882c7158649adbf6188758c2e366e33f"
            },
            {
              "last_affected": "396717c88bbff07f2486804b06c843076c1e789a"
            }
          ],
          "repo": "https://github.com/alfresco/acs-packaging",
          "type": "GIT"
        }
      ],
      "versions": [
        "7.0",
        "7.0.0.1",
        "7.0.0.2",
        "7.0.1"
      ]
    },
    {
      "ranges": [
        {
          "database_specific": {
            "cpe": "cpe:2.3:a:alfresco:community_share:*:*:*:*:*:*:*:*",
            "extracted_events": [
              {
                "introduced": "0"
              },
              {
                "last_affected": "7.0"
              }
            ],
            "source": "CPE_RANGE"
          },
          "events": [
            {
              "introduced": "0"
            },
            {
              "last_affected": "5e74a6cd808dd94d257b89e3e734e52b3ce3759c"
            }
          ],
          "repo": "https://github.com/alfresco/alfresco-community-share",
          "type": "GIT"
        }
      ]
    },
    {
      "ranges": [
        {
          "database_specific": {
            "cpe": [
              "cpe:2.3:a:alfresco:share:7.0:*:*:*:*:*:*:*",
              "cpe:2.3:a:alfresco:share:7.0.0.1:*:*:*:*:*:*:*",
              "cpe:2.3:a:alfresco:share:7.0.0.2:*:*:*:*:*:*:*"
            ],
            "extracted_events": [
              {
                "introduced": "7.0"
              },
              {
                "last_affected": "7.0"
              },
              {
                "introduced": "7.0.0.1"
              },
              {
                "last_affected": "7.0.0.1"
              },
              {
                "introduced": "7.0.0.2"
              },
              {
                "last_affected": "7.0.0.2"
              }
            ],
            "source": "CPE_STRING"
          },
          "events": [
            {
              "introduced": "eaaca6f453db6535813e8f6c8a85cb315e7fb91e"
            },
            {
              "last_affected": "77cd2b9afe571861c1f9184cf83650445d31bdc0"
            }
          ],
          "repo": "https://github.com/alfresco/share",
          "type": "GIT"
        }
      ],
      "versions": [
        "7.0",
        "7.0.0.1",
        "7.0.0.2"
      ]
    }
  ],
  "database_specific": {
    "unresolved_ranges": [
      {
        "cpes": [
          "cpe:2.3:a:alfresco:share:*:*:*:*:*:*:*:*"
        ],
        "extracted_events": [
          {
            "introduced": "5.0.0.0"
          },
          {
            "last_affected": "5.2.7.11"
          },
          {
            "introduced": "5.0.0.0"
          },
          {
            "last_affected": "5.2.7.11"
          }
        ],
        "source": "CPE_RANGE",
        "vendor_product": "alfresco:share"
      }
    ]
  },
  "details": "An issue was discovered in Hyland org.alfresco:share through 7.0.0.2 and org.alfresco:community-share through 7.0. An evasion of the XSS filter for HTML input validation in the Alfresco Share User Interface leads to stored XSS that could be exploited by an attacker (given that he has privileges on the content collaboration features).",
  "id": "CVE-2021-41791",
  "modified": "2026-07-08T05:38:53.097354699Z",
  "published": "2021-10-21T09:15:08.867Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://github.com/Alfresco/acs-packaging/blob/master/DISCLOSURES.md"
    },
    {
      "type": "ADVISORY",
      "url": "https://www.themissinglink.com.au/"
    }
  ],
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
      "type": "CVSS_V3"
    }
  ]
}