Логотип exploitDog
bind:CVE-2024-45137
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2024-45137

Количество 3

Количество 3

nvd логотип

CVE-2024-45137

больше 1 года назад

InDesign Desktop versions 19.4, 18.5.3 and earlier are affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in arbitrary code execution. An attacker could exploit this vulnerability by uploading a malicious file which, when executed, could run arbitrary code in the context of the server. Exploitation of this issue requires user interaction.

CVSS3: 7.8
EPSS: Низкий
github логотип

GHSA-925g-5g3q-9v34

больше 1 года назад

InDesign Desktop versions 19.4, 18.5.3 and earlier are affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in arbitrary code execution. An attacker could exploit this vulnerability by uploading a malicious file which, when executed, could run arbitrary code in the context of the server. Exploitation of this issue requires user interaction.

CVSS3: 7.8
EPSS: Низкий
fstec логотип

BDU:2024-08363

больше 1 года назад

Уязвимость средства автоматизации компьютерной вёрстки Adobe InDesign, связанная с неограниченной загрузкой файлов опасного типа, позволяющая нарушителю выполнить произвольный код

CVSS3: 7.8
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2024-45137

InDesign Desktop versions 19.4, 18.5.3 and earlier are affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in arbitrary code execution. An attacker could exploit this vulnerability by uploading a malicious file which, when executed, could run arbitrary code in the context of the server. Exploitation of this issue requires user interaction.

CVSS3: 7.8
0%
Низкий
больше 1 года назад
github логотип
GHSA-925g-5g3q-9v34

InDesign Desktop versions 19.4, 18.5.3 and earlier are affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in arbitrary code execution. An attacker could exploit this vulnerability by uploading a malicious file which, when executed, could run arbitrary code in the context of the server. Exploitation of this issue requires user interaction.

CVSS3: 7.8
0%
Низкий
больше 1 года назад
fstec логотип
BDU:2024-08363

Уязвимость средства автоматизации компьютерной вёрстки Adobe InDesign, связанная с неограниченной загрузкой файлов опасного типа, позволяющая нарушителю выполнить произвольный код

CVSS3: 7.8
0%
Низкий
больше 1 года назад

Уязвимостей на страницу