CVE-2020-24425CWE-427

Privilege escalation vulnerability in Dreamweaver version 20.2

High · published October 21, 2020

CVSS v3.1
7.5
EPSS
1%
Percentile
51.7
In the wild
Unconfirmed
What it is

Dreamweaver version 20.2 (and earlier) is affected by an uncontrolled search path element vulnerability that could lead to privilege escalation. Successful exploitation could result in a local user with permissions to write to the file system running system commands with administrator privileges.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00676 · 51.7th percentile
Weakness
CWE-427 · Uncontrolled Search Path Element
Published
2020-10-21T20:07Z
EPSS history
Timeline
  • 21 OCT 20:07Z
    Privilege escalation vulnerability in Dreamweaver version 20.2
    cvelistv5