High severity7.5NVD Advisory· Published Oct 21, 2020· Updated Jun 17, 2026
CVE-2020-24425
CVE-2020-24425
Description
Dreamweaver version 20.2 (and earlier) is affected by an uncontrolled search path element vulnerability that could lead to privilege escalation. Successful exploitation could result in a local user with permissions to write to the file system running system commands with administrator privileges.
Affected products
3cpe:2.3:a:adobe:dreamweaver:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:adobe:dreamweaver:*:*:*:*:*:*:*:*range: <=20.2
- (no CPE)range: <=20.2
- (no CPE)range: unspecified
Patches
Vulnerability mechanics
References
1- helpx.adobe.com/security/products/dreamweaver/apsb20-55.htmlnvdPatchVendor Advisory
News mentions
0No linked articles in our index yet.