CVE-2021-21085 — Adobe Connect CSV injection via export feature could lead to code execution

CVE-2021-21085

Adobe Connect CSV injection via export feature could lead to code execution PUBLISHED

Description (CNA)

Adobe Connect version 11.0.7 (and earlier) is affected by an Input Validation vulnerability in the export feature. An attacker could exploit this vulnerability by injecting a payload into an online event form and achieve code execution if the victim exports and opens the data on their local machine.

Affected (CNA)

Vendor / product	Versions
Adobe / Connect	affected unspecified through 11.0.7; affected unspecified through None

CWE

CWE-20

References

https://helpx.adobe.com/security/products/connect/apsb21-19.html

ADP enrichment

CVE

No English description supplied.

https://helpx.adobe.com/security/products/connect/apsb21-19.html

CISA-ADP

No English description supplied.

No references supplied.