Adobe Content Credentials Server-Side Request Forgery Vulnerability Allowing Arbitrary Code Execution

A Server-Side Request Forgery (SSRF) vulnerability has been identified in Adobe Content Credentials, specifically in the Rust SDK, Command-Line Tool, and JS SDK, all prior to the latest versions. This vulnerability could lead to arbitrary code execution in the context of the current user. An attacker might exploit this issue to inject malicious scripts into a web page, potentially gaining elevated access or control over the victim's account or session. Exploitation requires user interaction, such as visiting a maliciously crafted URL or engaging with a compromised web page.

Impact

Exploitation of this vulnerability could result in unauthorized arbitrary code execution, allowing an attacker to execute malicious scripts with the privileges of the affected user.

Remediation

Users are advised to update to the latest versions of the Adobe Content Credentials Rust SDK, Command-Line Tool, and JS SDK. The updated versions are available on the respective release notes pages for each product.