CVE-2022-42343: Adobe Campaign version 7.3.1 (and earlier) and 8.3.9 (and earlier) are affected by a Server-Side Request Forgery (SSRF) vulnerability that could lead to…

PriorityP339medium6.5CVSS 3.1

AVNACLPRLUINSUCHINAN

EPSS

1.36%

68.3th percentile

Adobe Campaign version 7.3.1 (and earlier) and 8.3.9 (and earlier) are affected by a Server-Side Request Forgery (SSRF) vulnerability that could lead to arbitrary file system read. A low-privilege authenticated attacker can force the application to make arbitrary requests via injection of arbitrary URLs. Exploitation of this issue does not require user interaction.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
adobe	adobe_campaign_classic	unspecified – 7.3.1	—
adobe	campaign	< 7.3.2	7.3.2
adobe	campaign	>= 8.0.0 < 8.4.2	8.4.2

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.