Approved changes feed: RSS · Atom

cpe:2.3:a:adobe:indesign:-:*:*:*:*:*:*:*

part: a version: - update: *

VendorAdobe (fb293c1b-cab3-5565-9184-186e4ece530b)
ProductIndesign (161c68f4-a7c5-5b5d-abea-6f77cf2e5043)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-45137 vulnerable 2026-06-08 06:45:55.402781 InDesign Desktop | Unrestricted Upload of File with Dangerous Type (CWE-434)
HIGH (7.8)
InDesign Desktop versions 19.4, 18.5.3 and earlier are affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in arbitrary code execution. An attacker could exploit this vulnerability by uploading a malicious file which, when executed, could run arbitrary code in the context of the server. Exploitation of this issue requires user interaction.
Published: 2024-10-09T14:18:39.512Z
Updated: 2024-10-09T16:04:13.405Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.