Unrestricted File Upload Vulnerability in Adobe InCopy
CVE-2024-45136

7.8HIGH

Key Information:

Vendor
Adobe
Status
Incopy
Vendor
CVE Published:
9 October 2024

Summary

Adobe InCopy versions 19.4 and 18.5.3 and earlier are susceptible to an unrestricted file upload vulnerability that can lead to arbitrary code execution. This security flaw allows an attacker to upload a malicious file to the server, contingent upon user interaction. Successfully exploiting this vulnerability poses significant risks to data integrity and system safety, necessitating immediate attention from users and administrators to mitigate potential threats.

References

https://helpx.adobe.com/security/products/incopy/apsb24-7...

EPSS Score

2% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

Collectors

NVD Database
.