CVE-2021-21085: falha de alta gravidade em Adobe Connect
Adobe Connect CSV injection via export feature could lead to code execution
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.8epss 3.9%
Adobe Connect version 11.0.7 (and earlier) is affected by an Input Validation vulnerability in the export feature. An attacker could exploit this vulnerability by injecting a payload into an online event form and achieve code execution if the victim exports and opens the data on their local machine.
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Produtos afetados
Adobe · ConnectCVEs relacionadas — Adobe Connect
No mesmo produto, das mais perigosas para as menos.
CVE-2023-22232MEDIUMAdobe Connect Improper Access Control Security feature bypassEPSS 83.4%CVE-2021-40719CRITICALAdobe Connect Deserialization of Untrusted Data Remote Code ExecutionEPSS 3.5%CVE-2021-36061MEDIUMAdobe Connect Violation of Secure Design Principles Vulnerability Can Lead To Editing Or Deleting RecordingsEPSS 1.6%CVE-2020-24443MEDIUMReflected Cross-Site Scripting (XSS) in Adobe ConnectEPSS 1.5%CVE-2020-24442MEDIUMReflected Cross-Site Scripting (XSS) in Adobe ConnectEPSS 1.5%CVE-2021-36063MEDIUMAdobe Connect Reflected Cross-site Scripting via 'isTabletDeviceHTML' parameterEPSS 1.4%