CVE-2021-40745CWE-22

Adobe Campaign Path Traversal Leads to Information Exposure

High · published November 17, 2021

CVSS v3.1
7.5
EPSS
4%
Percentile
89.7
In the wild
Unconfirmed
What it is

Adobe Campaign version 21.2.1 (and earlier) is affected by a Path Traversal vulnerability that could lead to reading arbitrary server files. By leveraging an exposed XML file, an unauthenticated attacker can enumerate other files on the server.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.03722 · 89.7th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2021-11-17T15:44Z
EPSS history
Timeline
  • 17 NOV 15:44Z
    Adobe Campaign Path Traversal Leads to Information Exposure
    cvelistv5