Description
Adobe RoboHelp Server versions 11.4 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to Remote Code Execution by an admin authenticated attacker. Exploitation of this issue does not require user interaction.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Adobe | RoboHelp | ≤ RHS 11.4 | — |
Advisories 1
- WID-SEC-2023-2920 Adobe RoboHelp: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 14, 2023