Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2021-40745

Adobe Campaign Path Traversal Leads to Information Exposure

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
adobe

Description

Adobe Campaign version 21.2.1 (and earlier) is affected by a Path Traversal vulnerability that could lead to reading arbitrary server files. By leveraging an exposed XML file, an unauthenticated attacker can enumerate other files on the server.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Adobe Campaign

  • unspecified to ≤ 21.2.1affected
  • unspecified to ≤ Noneaffected

References