CVE-2024-47422: Adobe Framemaker | Untrusted Search Path (CWE-426)
Adobe Framemaker versions 2020.6, 2022.4 and earlier are affected by an Untrusted Search Path vulnerability that could lead to arbitrary code execution. An attacker could exploit this vulnerability by inserting a malicious path into the search directories, which the application could unknowingly execute. This could allow the attacker to execute arbitrary code in the context of the current user. Exploitation of this issue requires user interaction.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-47422?
The severity of CVE-2024-47422 is critical due to the potential for arbitrary code execution.
How do I fix CVE-2024-47422?
To fix CVE-2024-47422, users should update Adobe Framemaker to version 2020.7 or higher, or 2022.5 or higher.
Which versions of Adobe Framemaker are affected by CVE-2024-47422?
CVE-2024-47422 affects Adobe Framemaker versions 2020.6, 2022.4, and earlier.
What type of vulnerability is CVE-2024-47422?
CVE-2024-47422 is classified as an Untrusted Search Path vulnerability.
What can an attacker achieve by exploiting CVE-2024-47422?
An attacker exploiting CVE-2024-47422 could potentially execute arbitrary code on the affected system.