Adobe Connect is affected by an Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability that could result in arbitrary code…
Adobe Connect is affected by an Improper Neutralization of CRLF Sequences ('CRLF Injection') vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require user interaction. Scope is changed.
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- Adobe
- Product
- Adobe Connect
- CVSS v3.1
- 10.0 AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N
- Weakness
- CWE-93
- NVD status
- Received
Why it ranks 33 (Notable)
- CVSS v3.1 10.0 critical
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.