CVE-2022-23201: Adobe RoboHelp Reflected XSS could lead to Arbitrary code execution

Q: What is the severity of CVE-2022-23201?

CVE-2022-23201 has been rated as a moderate severity vulnerability due to its potential for reflected Cross-Site Scripting attacks.

Q: How do I fix CVE-2022-23201?

To remediate CVE-2022-23201, users should update Adobe RoboHelp to version 2020.0.8 or later.

Q: What systems are affected by CVE-2022-23201?

CVE-2022-23201 affects Adobe RoboHelp versions up to and including 2020.0.7.

Q: What type of vulnerability is CVE-2022-23201?

CVE-2022-23201 is a reflected Cross-Site Scripting (XSS) vulnerability.

Q: How can CVE-2022-23201 be exploited?

CVE-2022-23201 can be exploited if an attacker tricks a victim into clicking a malicious URL, resulting in the execution of arbitrary JavaScript within the victim's session.

Published Jul 15, 2022

Updated

Adobe RoboHelp versions 2020.0.7 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.

Affected Software

1 affected component

Adobe RoboHelp<=2020.0.7

Remediation

Patch Available

https://helpx.adobe.com/security/products/robohelp/apsb22-10.html

Event History

Jul 15, 2022

CVE Published

via MITRE·03:46 PM

Data Sourced

via MITRE·03:46 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2022-23201?

CVE-2022-23201 has been rated as a moderate severity vulnerability due to its potential for reflected Cross-Site Scripting attacks.

How do I fix CVE-2022-23201?