CVE-2023-21621: Adobe FrameMaker Improper Input Validation Remote Code Execution Vulnerability
FrameMaker 2020 Update 4 (and earlier), 2022 (and earlier) are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-21621?
CVE-2023-21621 is an Improper Input Validation vulnerability in Adobe FrameMaker 2020 Update 4 (and earlier) and 2022 (and earlier) that could allow arbitrary code execution.
How does CVE-2023-21621 impact Adobe FrameMaker?
CVE-2023-21621 could result in arbitrary code execution in the context of the current user when a victim opens a malicious file in Adobe FrameMaker 2020 Update 4 (and earlier) and 2022 (and earlier).
What is the severity of CVE-2023-21621?
The severity of CVE-2023-21621 is high with a CVSS score of 7.8.
How do I fix the CVE-2023-21621 vulnerability in Adobe FrameMaker?
To fix the CVE-2023-21621 vulnerability in Adobe FrameMaker, it is recommended to apply the necessary security update provided by Adobe.
Where can I find more information about CVE-2023-21621?
More information about CVE-2023-21621 can be found on Adobe's official security advisory page: https://helpx.adobe.com/security/products/framemaker/apsb23-06.html.