CVE-2021-40745

CVE-2021-40745 is a Path Traversal vulnerability in Adobe Campaign versions 21.2.1 and earlier, affecting Windows and Linux deployments. This high-severity vulnerability (CVSS 7.5) allows an unauthenticated attacker to read arbitrary server files by exploiting an exposed XML file, potentially leading to sensitive data disclosure. While no public exploits, Metasploit modules, or Nuclei templates are currently available, and there's minimal community discussion or media coverage, its ease of exploitation and potential impact warrant attention. There is no evidence of active exploitation or inclusion in CISA's KEV catalog.