Product:
Adobe Connect
Summary
Adobe Connect versions 12.9 and earlier are affected by a URL Redirection to Untrusted Site vulnerability. An attacker could leverage this vulnerability to redirect users to malicious websites. Exploitation of this issue requires user interaction in that a victim must click on a crafted link.
Details
| Severity | Base Score | CVE |
|---|---|---|
| LOW | 3.1 | CVE-2025-54196 |
Exploitation
To exploit this vulnerability, an attacker must craft a malicious link that, when clicked by a user, redirects them to an untrusted site. This requires the user to be tricked into clicking the link, which can be done through phishing emails or misleading messages.
Affected Products
- Adobe Connect 12.9 and earlier: Vulnerable to URL redirection, allowing attackers to redirect users to malicious sites.
Mitigation
To mitigate this vulnerability, users should avoid clicking on untrusted links and ensure they are using the latest version of Adobe Connect. Adobe may also provide updates or patches to address this issue, so keeping software up to date is essential.