Skip to content
OpenAdvisories
High · 7.5 CVE-2021-40745 EUVD-2021-27910GHSA-22xh-v97v-2c2w

Adobe Campaign Path Traversal Leads to Information Exposure

Published Nov 17, 2021 · Updated Apr 23, 2025 · Assigned by adobe

Description

Adobe Campaign version 21.2.1 (and earlier) is affected by a Path Traversal vulnerability that could lead to reading arbitrary server files. By leveraging an exposed XML file, an unauthenticated attacker can enumerate other files on the server.

Affected products

VendorProductAffectedFixed
Adobe Campaign unspecified – ≤ 21.2.1, unspecified – ≤ None —

References