Dreamweaver version 20.2 (and earlier) is affected by an uncontrolled search path element vulnerability that could lead to privilege escalation. Successful exploitation could result in a local user with permissions to write to the file system running system commands with administrator privileges.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-24425
Reference (s):
- https://helpx.adobe.com/security/products/dreamweaver/apsb20-55.html
- URL: https://helpx.adobe.com/security/products/dreamweaver/apsb20-55.html