VYPR
← All advisories
High severity8.6NVD Advisory· Published Jan 13, 2021· Updated Jun 17, 2026

CVE-2021-21009

CVE-2021-21009

Description

Adobe Campaign Classic Gold Standard 10 (and earlier), 20.3.1 (and earlier), 20.2.3 (and earlier), 20.1.3 (and earlier), 19.2.3 (and earlier) and 19.1.7 (and earlier) are affected by a server-side request forgery (SSRF) vulnerability. Successful exploitation could allow an attacker to use the Campaign instance to issue unauthorized requests to internal or external resources.

Affected products

4
  • Adobe Inc./Campaign Classicllm-create3 versions
    <=10, <=20.3.1, <=20.2.3, <=20.1.3, <=19.2.3, <=19.1.7+ 2 more
    • (no CPE)range: <=10, <=20.3.1, <=20.2.3, <=20.1.3, <=19.2.3, <=19.1.7
    • cpe:2.3:a:adobe:campaign_classic:*:*:*:*:gold_standard:*:*:*range: <=10
    • cpe:2.3:a:adobe:campaign_classic:*:*:*:*:*:*:*:*range: <=19.1.7
  • Adobe Inc./Campaigncpe-rescue
    Range: unspecified

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.