Skip to content
OpenAdvisories
High · 7.8 CVE-2021-21085 EUVD-2021-8476GHSA-qc96-38mv-g6cc

Adobe Connect CSV injection via export feature could lead to code execution

Published Mar 12, 2021 · Updated Apr 23, 2025 · Assigned by adobe

Description

Adobe Connect version 11.0.7 (and earlier) is affected by an Input Validation vulnerability in the export feature. An attacker could exploit this vulnerability by injecting a payload into an online event form and achieve code execution if the victim exports and opens the data on their local machine.

Affected products

VendorProductAffectedFixed
Adobe Connect unspecified – ≤ 11.0.7, unspecified – ≤ None —

References