CVE-2021-40719: 
NixOS vulnerability analysis and mitigation

Adobe Connect version 11.2.3 (and earlier) is affected by a Deserialization of Untrusted Data vulnerability (CVE-2021-40719) that was discovered in October 2021. The vulnerability allows attackers to achieve arbitrary method invocation when AMF messages are deserialized on an Adobe Connect server (NVD).

The vulnerability is classified as a Deserialization of Untrusted Data (CWE-502) issue. It received a CVSS v3.0 base score of 9.8 (CRITICAL) with the vector string CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating that it can be exploited remotely with low attack complexity and requires no privileges or user interaction (NVD).

When successfully exploited, this vulnerability allows attackers to execute remote code execution on the affected Adobe Connect server. The high CVSS score indicates that the vulnerability can lead to a complete compromise of the system's confidentiality, integrity, and availability (Security Affairs).

Adobe has released patches to address this vulnerability. Users are advised to upgrade to versions newer than Adobe Connect 11.2.3. The fix was documented in Adobe's security bulletin APSB21-91 (Adobe Security).