CVE-2024-45136
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Oct 9, 2024
Updated: Oct 18, 2024
CWE ID 434
Summary
CVE-2024-45136 is a newly identified vulnerability that affects Adobe InCopy versions 19.4 and 18.5.3 and older. This issue involves an Unrestricted File Upload with Dangerous Type, allowing attackers to upload malicious files that can be executed on the server. By exploiting this vulnerability, an attacker can potentially gain arbitrary code execution, leading to serious security consequences. User interaction is required to exploit the issue, making it a potential threat to organizations that use InCopy for content creation and collaboration.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Adobe InCopy
Affected Vendors
- Adobe