CVE-2026-34657

Katalog CVE

CVSS 5.5 · Medium EPSS 0,29%

Kerentanan Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') pada adobe c2pa, adobe c2pa-web. Skor CVSS 3.1 5.5 (Medium) menurut adobe.com.

Deskripsi (NVD)

CAI Content Credentials versions c2pa-web@0.7.1, c2pa-v0.80.1 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in an arbitrary file system write. An attacker could leverage this vulnerability to write to unauthorized files or directories outside of intended restrictions. Exploitation of this issue requires user interaction in that a victim must extract a maliciously crafted file.

Rincian

Terbit di NVD

9 Juni 2026

Terakhir diubah

28 Agustus 2026

Status NVD

Analyzed

CVSS 3.1

5.5 (Medium), sumber adobe.com
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

EPSS (30 hari)

0,29% peluang dieksploitasi; lebih tinggi dari 19,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://helpx.adobe.com/security/products/content-authenticity-sdk/apsb26-61.html advisory vendor