Headline
CVE-2022-23201: Adobe Security Bulletin
Adobe RoboHelp versions 2020.0.7 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim’s browser.
Security update available for RoboHelp | APSB22-10
Bulletin ID
Date Published
Priority
APSB22-10
July 12, 2022
3
Summary
Adobe has released a security update for RoboHelp. This update resolves a vulnerability rated important. Successful exploitation could lead to arbitrary code execution in the context of current user.
Affected product versions
Product
Version
Platform
RoboHelp
RH2020.0.7 and earlier versions
Windows and macOS
Solution
Adobe categorizes these updates with the following priority ratings and recommends users update their installation to the newest version:
Product
Version
Platform
Priority
Availability
RoboHelp
RH2020.0.8
Windows and macOS
3
Download
Vulnerability details
Vulnerability Category
Vulnerability Impact
Severity
CVSS base score
CVSS vector
CVE Numbers
Cross-site Scripting (XSS) (CWE-79)
Arbitrary code execution
Important
6.5
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CVE-2022-23201
Acknowledgments
Adobe would like to thank MCKINEY,KRISTI (Agilent USA) for reporting this issue (CVE-2022-23201) and for working with Adobe to help protect our customers.