CVE-2021-40720

Published: Oct 15, 2021Modified: Jun 17, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: psirt@adobe.com (Secondary)

Description

Ops CLI version 2.0.4 (and earlier) is affected by a Deserialization of Untrusted Data vulnerability to achieve arbitrary code execution when the checkout_repo function is called on a maliciously crafted file. An attacker can leverage this to execute arbitrary code on the victim machine.

Affected (1)

Products: Adobe: Ops Cli

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Adobe Ops Cli	Before 2.0.5

Related CWEs

Deserialization of Untrusted Data

The product deserializes untrusted data without sufficiently verifying that the resulting data will be valid.

References (2)

https://helpx.adobe.com/security/products/ops_cli/apsb21-88.html

Source: psirt@adobe.com

PatchRelease NotesVendor Advisory

https://helpx.adobe.com/security/products/ops_cli/apsb21-88.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchRelease NotesVendor Advisory

Timeline

No history available yet.