CVE-2023-38211

CVE-2023-38211 affects Adobe Dimension 3.4.9 and is a Use-After-Free vulnerability that could allow arbitrary code execution in the context of the current user. Exploitation requires the victim to open a malicious file (user interaction). Several connected sources corroborate the issue as a post-...

Adobe Dimension < 3.4.10 Multiple Vulnerabilities (APSB23-44)

The version of Adobe Dimension installed on the remote Windows host is prior to 3.4.10. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB23-44 advisory. - Adobe Dimension version 3.4.9 is affected by a Heap-based Buffer Overflow vulnerability that could result in...

CVE-2022-38211 Server Side Request Forgery (SSRF) vulnerability in Portal for ArcGIS (10.9.1, 10.8.1 and 10.7.1 only)

Protections against potential Server-Side Request Forgery SSRF vulnerabilities in Esri Portal for ArcGIS versions 10.9.1 and below were not fully honored and may allow a remote, unauthenticated attacker to forge requests to arbitrary URLs from the system, potentially leading to network enumeratio...

CVE-2022-38211 Server Side Request Forgery (SSRF) vulnerability in Portal for ArcGIS (10.9.1, 10.8.1 and 10.7.1 only)

Protections against potential Server-Side Request Forgery SSRF vulnerabilities in Esri Portal for ArcGIS versions 10.9.1 and below were not fully honored and may allow a remote, unauthenticated attacker to forge requests to arbitrary URLs from the system, potentially leading to network enumeratio...

CVE-2022-38211

CVE-2022-38211 affects Esri Portal for ArcGIS (ArcGIS Portal) with versions 10.9.1 and earlier. The issue is a Server-Side Request Forgery (SSRF) vulnerability that may allow a remote, unauthenticated attacker to forge requests to arbitrary URLs from the system, potentially enabling network enume...

Server side request forgery (ssrf)

Protections against potential Server-Side Request Forgery SSRF vulnerabilities in Esri Portal for ArcGIS versions 10.8.1 and below were not fully honored and may allow a remote, unauthenticated attacker to forge requests to arbitrary URLs from the system, potentially leading to network enumeratio...