high7.5
CVE-2021-40745
Adobe Campaign version 21.2.1 (and earlier) is affected by a Path Traversal vulnerability that could lead to reading arbitrary server files.
Impact
Adobe Campaign version 21.2.1 (and earlier) is affected by a Path Traversal vulnerability that could lead to reading arbitrary server files. By leveraging an exposed XML file, an unauthenticated attacker can enumerate other files on the server.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Adobe | Campaign | through 21.2.1 |