CVE-2021-42725

Adobe Experience Manager version 6.5.9.0 (and earlier) are affected by an improper access control vulnerability that leads to a security feature bypass. By manipulating referer headers, an unauthenticated attacker could gain access to arbitrary pages that they are not authorized to access.

Date published : 2021-11-16

https://helpx.adobe.com/security/products/experience-manager/apsb21-82.html