Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

Alfresco/alfresco-community-repo

              master @ e5bcdcf
            

385

Fixes

CVEs

CRITICAL

Peak severity

31.6%

Coverage

Highlights

Auth Bypass: 163 prior fixes. Scrutinize any change in this area.

config/alfresco/public-services-security-context.xml: most-fixed (11 issues). Treat as high-risk during review.

299 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: Numerous fixes address missing or flawed authentication checks, including ticket validation, disabled user handling, and session reuse. The breadth indicates a systemic weakness in authentication state management across many entry points.

Authorization Bypass: Multiple fixes replace permissive ACL_ALLOW with explicit permission checks on service methods, indicating a recurring pattern of missing authorization on core repository operations.

Reflected XSS: A large number of fixes add HTML/JS/URL encoding to user-controlled output in templates and scripts, indicating pervasive missing output encoding across the web layer.