CyberRota Analysis
AI-GeneratedAdobe Experience Manager is vulnerable to a Server-Side Request Forgery (SSRF) flaw that allows low-privileged attackers to execute arbitrary code in the context of the current user, potentially leading to unauthorized access or control over user accounts and sessions. The exploitation of this vulnerability does not require any user interaction, making it particularly critical. Organizations using Adobe Experience Manager should prioritize immediate remediation to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Adobe Experience Manager is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could leverage this vulnerability to issue unauthorized server-side requests, potentially gaining elevated access or control over the victim's account or session. Exploitation of this issue does not require user interaction. Scope is changed.
Related CVEs
Other vulnerabilities affecting the same vendor(s)