VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Dec 16, 2022· Updated Aug 6, 2026

CVE-2022-42343

CVE-2022-42343

Description

Adobe Campaign version 7.3.1 (and earlier) and 8.3.9 (and earlier) are affected by a Server-Side Request Forgery (SSRF) vulnerability that could lead to arbitrary file system read. A low-privilege authenticated attacker can force the application to make arbitrary requests via injection of arbitrary URLs. Exploitation of this issue does not require user interaction.

Affected products

4
  • Adobe Inc./Campaigncpe-rescue4 versions
    unspecified+ 3 more
    • (no CPE)range: unspecified
    • (no CPE)range: <=7.3.1, <=8.3.9
    • cpe:2.3:a:adobe:campaign:*:*:*:*:classic:*:*:*range: <7.3.2
    • cpe:2.3:a:adobe:campaign:*:*:*:*:-:*:*:*range: >=8.0.0,<8.4.2

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.