CVE-2024-30314

CWE-78 — OS Command Injection3 documents3 sources
Severity
7.8HIGH
EPSS
0.4%
top 41.70%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Adobe DreamweaverAdobe Dreamweaver Desktop
Timeline
PublishedMay 16

Description

Dreamweaver Desktop versions 21.3 and earlier are affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could lead in arbitrary code execution by an attacker. Exploitation of this issue does require user interaction.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages2 packages

▶NVDadobe/dreamweaver< 21.4

🔴Vulnerability Details

2
CVEList
Dreamweaver Desktop | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)↗2024-05-16
▶
GHSA
GHSA-9c42-7gw7-4ffx: Dreamweaver Desktop versions 21↗2024-05-16
▶
CVE-2024-30314 (HIGH CVSS 7.8) | Dreamweaver Desktop versions 21.3 a | cvebase.io