Vulnerabilities > CVE-2021-21009 - Server-Side Request Forgery (SSRF) vulnerability in Adobe Campaign Classic

CVSS 5.0 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

PARTIAL

Integrity impact

NONE

Availability impact

NONE

network

low complexity

adobe

CWE-918

NVD

Published: 2021-01-13

Updated: 2021-01-21

Summary

Adobe Campaign Classic Gold Standard 10 (and earlier), 20.3.1 (and earlier), 20.2.3 (and earlier), 20.1.3 (and earlier), 19.2.3 (and earlier) and 19.1.7 (and earlier) are affected by a server-side request forgery (SSRF) vulnerability. Successful exploitation could allow an attacker to use the Campaign instance to issue unauthorized requests to internal or external resources.

Vulnerable Configurations

Part	Description	Count
Application	Adobe Adobe Campaign Classic 2 Adobe Campaign Classic 3 Adobe Campaign Classic 4 Adobe Campaign Classic 5 Adobe Campaign Classic 6 Adobe Campaign Classic 8 Adobe Campaign Classic 9 Adobe Campaign Classic 10 Adobe Campaign Classic 11 Adobe Campaign Classic 19.1 Adobe Campaign Classic 19.1.7 Adobe Campaign Classic 19.2 Adobe Campaign Classic 19.2.3 Adobe Campaign Classic 20.1 Adobe Campaign Classic 20.1.3 Adobe Campaign Classic 20.2 Adobe Campaign Classic 20.2.3 Adobe Campaign Classic 20.3 Adobe Campaign Classic 20.3.1	19
OS	Linux Linux Linux Kernel -	1
OS	Microsoft Microsoft Windows -	1

Common Weakness Enumeration (CWE)

CWE-918 - Server-Side Request Forgery (SSRF)

References

https://helpx.adobe.com/security/products/campaign/apsb21-04.html