Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-v865-6qv6-w5m2

Опубликовано: 13 июн. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 5.5

Описание

Creative Cloud Desktop versions 6.1.0.587 and earlier are affected by an Uncontrolled Search Path Element vulnerability that could result in a security feature bypass. An attacker could exploit this vulnerability to load and execute malicious libraries, leading to arbitrary file delete. Exploitation of this issue requires user interaction.

Creative Cloud Desktop versions 6.1.0.587 and earlier are affected by an Uncontrolled Search Path Element vulnerability that could result in a security feature bypass. An attacker could exploit this vulnerability to load and execute malicious libraries, leading to arbitrary file delete. Exploitation of this issue requires user interaction.

EPSS

Процентиль: 6%
0.00024
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-427

Связанные уязвимости

CVSS3: 7.1
nvd
больше 1 года назад

Creative Cloud Desktop versions 6.1.0.587 and earlier are affected by an Uncontrolled Search Path Element vulnerability that could result in a security feature bypass. An attacker could exploit this vulnerability to load and execute malicious libraries, leading to arbitrary file delete. Exploitation of this issue requires user interaction.

CVSS3: 7.3
fstec
больше 1 года назад

Уязвимость приложения графического редактора для рабочего стола Adobe Creative Cloud Desktop Application, связанная с неконтролируемым элементом пути поиска, позволяющая нарушителю выполнить обойти существующие ограничения безопасности и выполнить произвольный код

EPSS

Процентиль: 6%
0.00024
Низкий

5.5 Medium

CVSS3

Дефекты

CWE-427