Vulnerability Details CVE-2022-42343
Adobe Campaign version 7.3.1 (and earlier) and 8.3.9 (and earlier) are affected by a Server-Side Request Forgery (SSRF) vulnerability that could lead to arbitrary file system read. A low-privilege authenticated attacker can force the application to make arbitrary requests via injection of arbitrary URLs. Exploitation of this issue does not require user interaction.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.007
EPSS Ranking 70.6%
CVSS Severity
CVSS v3 Score 6.5
References
Products affected by CVE-2022-42343
-
cpe:2.3:a:adobe:campaign:-
-
cpe:2.3:a:adobe:campaign:7.2.1
-
cpe:2.3:a:adobe:campaign:7.2.2
-
cpe:2.3:a:adobe:campaign:7.3.1
-
cpe:2.3:a:adobe:campaign:8.0.0
-
cpe:2.3:a:adobe:campaign:8.1.14
-
cpe:2.3:a:adobe:campaign:8.1.20
-
cpe:2.3:a:adobe:campaign:8.2.10
-
cpe:2.3:a:adobe:campaign:8.2.8
-
cpe:2.3:a:adobe:campaign:8.3.8
-
cpe:2.3:a:adobe:campaign:8.3.9
-
cpe:2.3:a:adobe:campaign:8.4.1
-
cpe:2.3:o:linux:linux_kernel:-
-
cpe:2.3:o:microsoft:windows:-