CVE-2021-21009

🗓️ 13 Jan 2021 22:47:48Reported by adobeType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 59 Views

Adobe Campaign Classic Gold Standard 10 (and earlier), 20.3.1 (and earlier), 20.2.3 (and earlier), 20.1.3 (and earlier), 19.2.3 (and earlier) and 19.1.7 (and earlier) are affected by a server-side request forgery (SSRF) vulnerability. Successful exploitation could allow an attacker to use the Campaign instance to issue unauthorized requests to internal or external resources

Reporter	Title	Published	Views	Family All 12
Adobe	APSB21-04 Security updates available for Adobe Campaign Classic	12 Jan 202100:00	–	adobe
BDU FSTEC	The vulnerability of the software platform for conducting marketing campaigns, both online and offline, in Adobe Campaign Classic, arises from insufficient verification of incoming requests. This allows a perpetrator to gain unauthorized access to protected information.	9 Feb 202100:00	–	bdu_fstec
Circl	CVE-2021-21009	23 Apr 202520:04	–	circl
CNNVD	Adobe Campaign Classic 代码问题漏洞	12 Jan 202100:00	–	cnnvd
CNVD	Adobe Campaign Classic Server-Side Request Forgery Vulnerability	13 Jan 202100:00	–	cnvd
Cvelist	CVE-2021-21009 Server-side request forgery (SSRF) in Campaign Classic could lead to sensitive information disclosure	13 Jan 202122:47	–	cvelist
EUVD	EUVD-2021-8418	3 Oct 202520:07	–	euvd
NVD	CVE-2021-21009	13 Jan 202123:15	–	nvd
OSV	CVE-2021-21009	13 Jan 202123:15	–	osv
Prion	Server side request forgery (ssrf)	13 Jan 202123:15	–	prion

NVD

Vulners

Node

adobe campaign_classicRange≤10gold_standard

adobe campaign_classicRange≤19.1.7

adobe campaign_classicRange19.2–19.2.3

adobe campaign_classicRange20.1–20.1.3

adobe campaign_classicRange20.2–20.2.3

adobe campaign_classicRange20.3–20.3.1

AND

linux linux_kernelMatch-

microsoft windowsMatch-

[
  {
    "product": "Campaign",
    "vendor": "Adobe",
    "versions": [
      {
        "lessThanOrEqual": "20.3.1 and earlier",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "Gold Standard 10 and earlier",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "20.2.3 and earlier",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "20.1.3 and earlier",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "19.2.3 and earlier",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "19.1.7 and earlier",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
helpx	www.helpx.adobe.com/security/products/campaign/apsb21-04.html

21 Nov 2024 05:47Current

8.4High risk

Vulners AI Score8.4

CVSS 25

CVSS 3.18.6

EPSS0.0083

SSVC

CWE-918