CVE-2019-7105CWE-22path-traversal

CVE-2019-7105

Critical · published May 23, 2019

CVSS v3.1
9.8
EPSS
6%
Percentile
93.5
In the wild
Unconfirmed
What it is

⚠️ A sneaky path traversal vulnerability lurks in Adobe XD versions 16.0 and earlier, allowing unintended file access! 🚨 Think of it like a delivery driver who doesn’t just stop at your front door but casually wanders through your garage and into your house. This vulnerability lets an attacker exploit the system with the right commands, bypassing security measures like a bold intruder! If exploited, this could lead to arbitrary code execution — meaning an attacker could run whatever they want on your system! Imagine a burglar not just stealing your valuables but also hijacking your entire house, changing the locks, and throwing a party without you knowing. Yikes!

Put simply

Think of it like a delivery driver who doesn’t just stop at your front door but casually wanders through your garage and into your house. This vulnerability lets an attacker exploit the system with the right commands, bypassing security measures like a bold intruder! This vulnerability allows an attacker to manipulate file paths to access files and execute arbitrary code on a vulnerable system, bypassing intended security controls.

What to do

If exploited, this could lead to arbitrary code execution — meaning an attacker could run whatever they want on your system! Imagine a burglar not just stealing your valuables but also hijacking your entire house, changing the locks, and throwing a party without you knowing. Yikes! To protect yourself, update Adobe XD to version 16.1 or later. It’s crucial to regularly patch applications and review your settings to ensure you're not inadvertently exposing sensitive files. You've got this! Stay proactive, and your security hero status will shine bright! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.06157 · 93.5th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2019-05-23T20:29Z
Affected products (1)
ProductVersionsFixed in
adobe/xd< 17.0.1217.0.12
References (2)
EPSS history
Timeline
  • 23 MAY 15:42Z
    Adobe XD versions 16.0 and earlier have a path traversal vulnerability
    cvelistv5