CVE-2021-21055: 
Adobe Dreamweaver vulnerability analysis and mitigation

Adobe Dreamweaver versions 21.0 (and earlier) and 20.2 (and earlier) is affected by an untrusted search path vulnerability that could result in information disclosure. The vulnerability was discovered and disclosed in February 2021 (NVD, CVE).

The vulnerability is classified as an untrusted search path element vulnerability (CWE-426). It received a CVSS v3.1 Base Score of 6.2 (MEDIUM) with the following vector: CVSS:3.1/AV:P/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H. Under CVSS v2.0, it received a Base Score of 2.1 (LOW) with vector: (AV:L/AC:L/Au:N/C:P/I:N/A:N) (NVD).

An attacker with physical access to the system could replace certain configuration files and dynamic libraries that Dreamweaver references, potentially resulting in information disclosure (NVD).

The vulnerability requires physical access to the system and has high attack complexity. It also requires low privileges and user interaction to be exploited (NVD).

Adobe has released security patches to address this vulnerability. Users should update to the latest version of Adobe Dreamweaver (Adobe Advisory).