topic Re: Vulnerability in Alfresco enteprise in Alfresco Forum

Vulnerability in Alfresco enteprise

swatcat91 — Sat, 04 Feb 2023 04:32:46 GMT

Hi,

I have found a vulnerability in Alfresco enterprise and want to do a responsible disclosure so that the team can access and fix the vulnerability. As I am not an Alfresco customer, the Hyland support team is not giving me access to Alfresco Community so I am unable to submit a case. Whom should I contact in order to disclose this vulnerability to the Alfresco team ?

Re: Vulnerability in Alfresco enteprise

angelborroy — Sat, 04 Feb 2023 16:52:01 GMT

You may use the mailbox appsecurity@hyland.com

Thanks for your collaboration!

Re: Vulnerability in Alfresco enteprise

swatcat91 — Mon, 13 Mar 2023 23:43:56 GMT

Hi,

I have sent appsecurity@hyland.com 3 emails mentioning in the emails that I have a security vulnerability to report, but never got a reply. Is there any other way to contact or get attention of their application security team ?