Uncontrolled Search Path Element vulnerability in Lightroom Classic 10.0
CVE-2020-24447

7HIGH

Key Information:

Vendor

Adobe
Status
Lightroom
Vendor
CVE Published:
11 December 2020

What is CVE-2020-24447?

Adobe Lightroom Classic version 10.0 (and earlier) for Windows is affected by an uncontrolled search path vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

Affected Version(s)

Lightroom <= 10.0 <= 10.0

Lightroom <= None <= None

References

https://helpx.adobe.com/security/products/lightroom/apsb2...
x_refsource_CONFIRM

CVSS V3.1

Score:
7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.