CVE-2021-21055 MEDIUM

CVE-2021-21055: Adobe Dreamweaver Untrusted Search Path Vulnerability Could Lead To Information Disclosure

Vendor Adobe
Product Dreamweaver
Weakness CWE-426
Published February 11, 2021
Last update April 23, 2025

CVSS base score

6.2/10
Attack vector Physical
Attack complexity High
Privileges required Low
User interaction Required
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:P/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

Adobe Dreamweaver versions 21.0 (and earlier) and 20.2 (and earlier) is affected by an untrusted search path vulnerability that could result in information disclosure. An attacker with physical access to the system could replace certain configuration files and dynamic libraries that Dreamweaver references, potentially resulting in information disclosure.

Key dates

02Disclosure timeline

February 11, 2021 CVE published
April 23, 2025 Record updated