CVE-2021-21009: Server-side request forgery (SSRF) in Campaign Classic could lead to sensitive information disclosure
Adobe Campaign Classic Gold Standard 10 (and earlier), 20.3.1 (and earlier), 20.2.3 (and earlier), 20.1.3 (and earlier), 19.2.3 (and earlier) and 19.1.7 (and earlier) are affected by a server-side request forgery (SSRF) vulnerability. Successful exploitation could allow an attacker to use the Campaign instance to issue unauthorized requests to internal or external resources.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-21009?
CVE-2021-21009 has been classified with a severity rating that necessitates immediate attention due to the potential for exploitation.
How do I fix CVE-2021-21009?
To fix CVE-2021-21009, users should upgrade to the latest version of Adobe Campaign Classic as advised in the relevant security updates.
Which versions are affected by CVE-2021-21009?
CVE-2021-21009 affects Adobe Campaign Classic versions 10 and earlier, 20.3.1 and earlier, 20.2.3 and earlier, 20.1.3 and earlier, 19.2.3 and earlier, and 19.1.7 and earlier.
What type of vulnerability is CVE-2021-21009?
CVE-2021-21009 is classified as a server-side request forgery (SSRF) vulnerability.
What could be the impact of exploiting CVE-2021-21009?
Exploitation of CVE-2021-21009 could allow an attacker to perform unauthorized actions on behalf of the server, potentially leading to sensitive data exposure.