CVE-2021-28588

CVE-2021-28588 affects Adobe RoboHelp Server up to version 2019.0.9. The root cause is a path traversal flaw in the server when processing requests (notably the folderId parameter), which allows an attacker to execute arbitrary code. Exploitation could occur via a crafted HTTP POST and, per sourc...

Adobe RoboHelp Server <= 2019.0.9 Arbitrary Code Execution (APSB21-44)

The version of Adobe RoboHelp Server installed on the remote host is less than or equal to 2019.0.9. It is, therefore, affected by an arbitrary code execution vulnerability as referenced in the apsb21-44 advisory. Note that Nessus has not tested for this issue but has instead relied only on the...