Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2021-21085

Adobe Connect CSV injection via export feature could lead to code execution

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
adobe

Description

Adobe Connect version 11.0.7 (and earlier) is affected by an Input Validation vulnerability in the export feature. An attacker could exploit this vulnerability by injecting a payload into an online event form and achieve code execution if the victim exports and opens the data on their local machine.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Adobe Connect

  • unspecified to ≤ 11.0.7affected
  • unspecified to ≤ Noneaffected

References