CVE-2021-21009
13.01.2021, 23:15
Adobe Campaign Classic Gold Standard 10 (and earlier), 20.3.1 (and earlier), 20.2.3 (and earlier), 20.1.3 (and earlier), 19.2.3 (and earlier) and 19.1.7 (and earlier) are affected by a server-side request forgery (SSRF) vulnerability. Successful exploitation could allow an attacker to use the Campaign instance to issue unauthorized requests to internal or external resources.
SSRF
| Vendor | Product | Version |
|---|---|---|
| adobe | campaign_classic | 𝑥 ≤ 10 |
| adobe | campaign_classic | 𝑥 ≤ 19.1.7 |
| adobe | campaign_classic | 19.2 ≤ 𝑥 ≤ 19.2.3 |
| adobe | campaign_classic | 20.1 ≤ 𝑥 ≤ 20.1.3 |
| adobe | campaign_classic | 20.2 ≤ 𝑥 ≤ 20.2.3 |
| adobe | campaign_classic | 20.3 ≤ 𝑥 ≤ 20.3.1 |
𝑥
= Vulnerable software versions