ZDI-23-1651: Adobe RoboHelp Server getRHSGroupsForRoles SQL Injection Information Disclosure Vulnerability
Published Nov 15, 2023
·Updated
This vulnerability allows remote attackers to disclose sensitive information on affected installations of Adobe RoboHelp Server. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 6.5. The following CVEs are assigned: CVE-2023-22268.
Affected Software
1 affected component
Adobe RoboHelp Server
Event History
Nov 15, 2023
Advisory Published
06:00 AM
Data Sourced
06:00 AM
Description
Frequently Asked Questions
1
What is the severity of ZDI-23-1651?
The severity of ZDI-23-1651 is rated at 6.5 on the CVSS scale.
2
How do I fix ZDI-23-1651?
To address ZDI-23-1651, ensure that you update Adobe RoboHelp Server to the latest version provided by Adobe.
3
What kind of attack can exploit ZDI-23-1651?
ZDI-23-1651 can be exploited by remote attackers to disclose sensitive information.
4
Is authentication required to exploit ZDI-23-1651?
Yes, authentication is required for attackers to exploit the ZDI-23-1651 vulnerability.
5
What products are affected by ZDI-23-1651?
ZDI-23-1651 affects Adobe RoboHelp Server installations.