PT-2019-5991 · Adobe · Brackets

Publicado 2019-12-10 · Atualizado 2020-08-24 · CVE-2019-8255

Positive Technologies (AI Summary)

CVSS v3.1

10

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Brackets versions 1.14 and earlier

Description The issue is related to a lack of data sanitization at the management level in the text editor. It may allow a remote attacker to execute arbitrary commands in the target system, potentially leading to arbitrary code execution.

Recommendations For Brackets versions 1.14 and earlier, update to a version later than 1.14 to resolve the command injection issue. At the moment, there is no information about other specific fixes for this issue.

Correção

Command Injection

Enumeração de Fraquezas

CWE-77

Identificadores relacionados

BDU:2021-04182

CVE-2019-8255

Produtos afetados

Brackets

Referências · 4

• https://helpx.adobe.com/security/products/brackets/apsb19-57.html · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2021-04182 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-8255 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-8255 · Nota de Segurança