Unrestricted File Upload Vulnerability in Adobe InCopy
CVE-2024-45136

7.8HIGH

Key Information:

Vendor

Adobe
Status
Incopy
Vendor
CVE Published:
9 October 2024

What is CVE-2024-45136?

Adobe InCopy versions 19.4 and 18.5.3 and earlier are susceptible to an unrestricted file upload vulnerability that can lead to arbitrary code execution. This security flaw allows an attacker to upload a malicious file to the server, contingent upon user interaction. Successfully exploiting this vulnerability poses significant risks to data integrity and system safety, necessitating immediate attention from users and administrators to mitigate potential threats.

References

https://helpx.adobe.com/security/products/incopy/apsb24-7...

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

.
CVE-2024-45136 : Unrestricted File Upload Vulnerability in Adobe InCopy