Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-m9gf-7pr5-72cf

Опубликовано: 21 дек. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

Adobe Campaign version 7.3.1 (and earlier) and 8.3.9 (and earlier) are affected by a Server-Side Request Forgery (SSRF) vulnerability that could lead to arbitrary file system read. A low-privilege authenticated attacker can force the application to make arbitrary requests via injection of arbitrary URLs. Exploitation of this issue does not require user interaction.

Adobe Campaign version 7.3.1 (and earlier) and 8.3.9 (and earlier) are affected by a Server-Side Request Forgery (SSRF) vulnerability that could lead to arbitrary file system read. A low-privilege authenticated attacker can force the application to make arbitrary requests via injection of arbitrary URLs. Exploitation of this issue does not require user interaction.

EPSS

Процентиль: 74%
0.00799
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-918

Связанные уязвимости

CVSS3: 6.5
nvd
около 3 лет назад

Adobe Campaign version 7.3.1 (and earlier) and 8.3.9 (and earlier) are affected by a Server-Side Request Forgery (SSRF) vulnerability that could lead to arbitrary file system read. A low-privilege authenticated attacker can force the application to make arbitrary requests via injection of arbitrary URLs. Exploitation of this issue does not require user interaction.

CVSS3: 6.5
fstec
около 3 лет назад

Уязвимость программной платформы для проведения маркетинговых кампании Adobe Campaign Classic, связанная с недостаточной проверкой поступающих запросов, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

EPSS

Процентиль: 74%
0.00799
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-918