CVE-2022-42343: Adobe Campaign Classic Server-Side Request Forgery Arbitrary file system read
Adobe Campaign version 7.3.1 (and earlier) and 8.3.9 (and earlier) are affected by a Server-Side Request Forgery (SSRF) vulnerability that could lead to arbitrary file system read. A low-privilege authenticated attacker can force the application to make arbitrary requests via injection of arbitrary URLs. Exploitation of this issue does not require user interaction.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-42343?
CVE-2022-42343 is a Server-Side Request Forgery (SSRF) vulnerability in Adobe Campaign version 7.3.1 and earlier, and 8.3.9 and earlier, which could lead to arbitrary file system read.
How does the vulnerability in Adobe Campaign version 7.3.1 (and earlier) and 8.3.9 (and earlier) affect the system?
The vulnerability allows a low-privilege authenticated attacker to force the application to make arbitrary requests, potentially resulting in arbitrary file system read.
What is the severity of CVE-2022-42343?
The severity of CVE-2022-42343 is medium with a CVSS score of 6.5.
How can I fix the vulnerability in Adobe Campaign version 7.3.1 (and earlier) and 8.3.9 (and earlier)?
Adobe has released security updates to address this vulnerability, it is recommended to update to the latest version of Adobe Campaign.
Where can I find more information about CVE-2022-42343?
You can find more information about CVE-2022-42343 on the Adobe Security Bulletin APSB22-58.