CVE-2021-21085: Adobe Connect CSV injection via export feature could lead to code execution
Adobe Connect version 11.0.7 (and earlier) is affected by an Input Validation vulnerability in the export feature. An attacker could exploit this vulnerability by injecting a payload into an online event form and achieve code execution if the victim exports and opens the data on their local machine.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-21085?
CVE-2021-21085 is an Input Validation vulnerability in Adobe Connect version 11.0.7 (and earlier).
How does CVE-2021-21085 affect Adobe Connect?
CVE-2021-21085 allows an attacker to exploit the export feature in Adobe Connect, potentially achieving code execution on the victim's machine.
What is the severity of CVE-2021-21085?
CVE-2021-21085 has a severity value of 7.8, which is considered high.
How can I fix the Input Validation vulnerability in Adobe Connect?
To fix the Input Validation vulnerability in Adobe Connect, update to version 11.0.8 or later.
Where can I find more information about CVE-2021-21085?
You can find more information about CVE-2021-21085 on the Adobe Security Bulletin APSB21-19.