C2pa-web vulnerabilities
36 known vulnerabilities in C2pa-web from Adobe. 36 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.6 High severity
Content Credentials Rust SDK: Server-Side Request Forgery
CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. Scope is changed.
- 7.5 High severity
Content Credentials Rust SDK: Improper Verification of Cryptographic Signature
CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write acces
- 7.5 High severity
Content Credentials Rust SDK: Improper Verification of Cryptographic Signature
CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write acces
- 7.5 High severity
Content Credentials Rust SDK: Uncontrolled Resource Consumption
CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service
- 7.5 High severity
Content Credentials Rust SDK: Uncontrolled Resource Consumption
CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service
- 7.5 High severity
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could…
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this
- 7.5 High severity
Content Credentials Rust SDK: Improper Verification of Cryptographic Signature
CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write acces
- 7.5 High severity
Content Credentials Rust SDK: Improper Verification of Cryptographic Signature
CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write acces
- 7.5 High severity
Content Credentials Rust SDK: Uncontrolled Resource Consumption
CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service
- 7.5 High severity
Content Credentials Rust SDK: Uncontrolled Resource Consumption
CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service
- 7.5 High severity
Content Credentials Rust SDK: Uncontrolled Resource Consumption
CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service
- 7.5 High severity
Content Credentials Rust SDK: Integer Overflow or Wraparound
CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Explo
- 7.5 High severity
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could…
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this
- 7.5 High severity
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could…
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this
- 7.5 High severity
Content Credentials Rust SDK: Improper Certificate Validation
CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation o
- 7.5 High severity
Content Credentials Rust SDK: Improper Certificate Validation
CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation o
- 7.5 High severity
Content Credentials Rust SDK: Improper Certificate Validation
CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation o
- 7.5 High severity
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could…
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this
- 7.5 High severity
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could…
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this
- 7.5 High severity
Content Credentials Rust SDK: Improper Certificate Validation
CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation o
- 7.5 High severity
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could…
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this
- 7.5 High severity
Content Credentials Rust SDK: Improper Access Control
CAI Content Credentials is affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this i
- 7.5 High severity
Content Credentials Rust SDK: Improper Access Control
CAI Content Credentials is affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this i
- 7.5 High severity
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could…
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this
- 7.1 High severity
Content Credentials Rust SDK: Improper Limitation of a Pathname to a Restricted Directory
CAI Content Credentials is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in a Arbitrary file system read. An attacker could leverage this vulnerability to gain unauthorized read ac
- 7.5 High severity
Content Credentials Rust SDK: Uncontrolled Resource Consumption
CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-service
- 7.5 High severity
Content Credentials Rust SDK: NULL Pointer Dereference
CAI Content Credentials is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation
- 7.5 High severity
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could…
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitati
- 7.5 High severity
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could…
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitati
- 7.5 High severity
Content Credentials Rust SDK: Insufficiently Protected Credentials
CAI Content Credentials is affected by an Insufficiently Protected Credentials vulnerability that could result in disclosure of sensitive information. An attacker could leverage this vulnerability to gain unauthorized read access. Exploitation of this issue do
- 8.2 High severity
Content Credentials Rust SDK: Server-Side Request Forgery
CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to inject malicious scripts into a web page
- 7.4 High severity
Content Credentials Rust SDK: Untrusted Search Path
CAI Content Credentials is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue requires use
- 7.5 High severity
Content Credentials Rust SDK: Uncontrolled Resource Consumption
CAI Content Credentials versions [email protected], c2pa-v0.80.1 and earlier are affected by an Uncontrolled Resource Consumption vulnerability. An attacker could exploit this vulnerability to exhaust system resources, resulting in an application denial-of-servic
- 7.5 High severity
CAI Content Credentials versions [email protected], c2pa-v0.80.1 and earlier are affected by an…
CAI Content Credentials versions [email protected], c2pa-v0.80.1 and earlier are affected by an Improper Input Validation vulnerability. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation
- 7.5 High severity
Content Credentials Rust SDK: Integer Overflow or Wraparound
CAI Content Credentials versions [email protected], c2pa-v0.80.1 and earlier are affected by an Integer Overflow or Wraparound vulnerability. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploita
- 7.5 High severity
Content Credentials JS SDK: Uncontrolled Resource Consumption
CAI Content Credentials versions [email protected], c2pa-v0.78.2 and earlier are affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to exhaust system resour