CVE-2021-21055

published 2021-02-11

CVE-2021-21055: Adobe Dreamweaver versions 21.0 (and earlier) and 20.2 (and earlier) is affected by an untrusted search path vulnerability that could result in information…

Priority P4 21 medium 6.2 CVSS 3.1

AV P AC H PR L UI R S U C H I H A H

Adobe Dreamweaver versions 21.0 (and earlier) and 20.2 (and earlier) is affected by an untrusted search path vulnerability that could result in information disclosure. An attacker with physical access to the system could replace certain configuration files and dynamic libraries that Dreamweaver references, potentially resulting in information disclosure.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
adobe	dreamweaver	<= 20.2	—
adobe	dreamweaver	—	—
adobe	dreamweaver	unspecified – 21.0	—

CVSS provenance

nvd v3.1 6.2 MEDIUM CVSS:3.1/AV:P/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

nvd v2.0 2.1 LOW AV:L/AC:L/Au:N/C:P/I:N/A:N

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-426