InDesign Desktop versions 19.4, 18.5.3 and earlier are affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in arbitrary code execution. An attacker could exploit this vulnerability by uploading a malicious file which, when executed, could run arbitrary code in the context of the server. Exploitation of this issue requires user interaction.
References
| Link | Resource |
|---|---|
| https://helpx.adobe.com/security/products/incopy/apsb24-79.html | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
18 Oct 2024, 14:20
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
| CPE | cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* cpe:2.3:a:adobe:indesign:*:*:*:*:*:*:*:* cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:* |
|
| First Time |
Microsoft
Apple Microsoft windows Adobe indesign Apple macos Adobe |
|
| References | () https://helpx.adobe.com/security/products/incopy/apsb24-79.html - Vendor Advisory |
09 Oct 2024, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-10-09 15:15
Updated : 2024-10-18 14:20
NVD link : CVE-2024-45137
Mitre link : CVE-2024-45137
JSON object : View
Products Affected
microsoft
- windows
apple
- macos
adobe
- indesign
CWE
CWE-434
Unrestricted Upload of File with Dangerous Type