Hyland Alfresco Transformation Service Absolute Path Traversal Arbitrary File Read and SSRF Vulnerability

A vulnerability in Hyland Alfresco Transformation Service has been identified, allowing unauthenticated attackers to perform arbitrary file reads and conduct server-side request forgery (SSRF) attacks through absolute path traversal. This issue affects Alfresco Transformation Service (Enterprise) versions prior to 4.3.0 and Alfresco Community (Transform Core) versions prior to 5.3.0.

Impact

Exploitation of this vulnerability could lead to unauthorized file access and SSRF, allowing attackers to make requests to internal services or resources on behalf of the server.