CVE-2023-22273

ZDI-CAN-21307: Adobe RoboHelp Server OnPublishFile Directory Traversal Remote Code Execution Vulnerability

CVSS 7.2 HIGHEPSS 1.9%CWE-22

Vexday Risk Score

21Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 7.2EPSS 1.9%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado

Ciclo de vida

17 nov 2023Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

Adobe RoboHelp Server versions 11.4 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to Remote Code Execution by an admin authenticated attacker. Exploitation of this issue does not require user interaction.

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Produtos afetados

Adobe · RoboHelp

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://helpx.adobe.com/security/products/robohelp-server/apsb23-53.html