CVE-2024-30314: Dreamweaver Desktop | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)
Published May 16, 2024
·Updated
Dreamweaver Desktop versions 21.3 and earlier are affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could lead in arbitrary code execution by an attacker. Exploitation of this issue does require user interaction.
Affected Software
3 affected components
All of the following
Adobe Dreamweaver<21.4
Any of the following
Apple macOS
Microsoft Windows
Event History
May 16, 2024
CVE Published
via MITRE·11:36 AM
Data Sourced
via MITRE·11:36 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·12:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-30314?
CVE-2024-30314 has a high severity rating due to its potential for arbitrary code execution.
2
How do I fix CVE-2024-30314?
To fix CVE-2024-30314, update Adobe Dreamweaver to version 21.4 or later.
3
What software versions are impacted by CVE-2024-30314?
CVE-2024-30314 affects Adobe Dreamweaver versions 21.3 and earlier.
4
What could an attacker achieve by exploiting CVE-2024-30314?
Exploitation of CVE-2024-30314 could enable an attacker to execute arbitrary code on the affected system.
5
Does CVE-2024-30314 require user interaction for exploitation?
Yes, exploitation of CVE-2024-30314 requires user interaction.