CVE-2021-21070CWE-427

Privilege Escalation Vulnerability in Adobe RoboHelp

Medium · published April 19, 2021

CVSS v3.1
6.5
EPSS
2%
Percentile
75.6
In the wild
Unconfirmed
What it is

Adobe Robohelp version 2020.0.3 (and earlier) is affected by an uncontrolled search path element vulnerability that could lead to privilege escalation. An attacker with admin permissions to write to the file system could leverage this vulnerability to escalate privileges.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01598 · 75.6th percentile
Weakness
CWE-427 · Uncontrolled Search Path Element
Published
2021-04-19T12:28Z
EPSS history
Timeline
  • 19 APR 12:28Z
    Privilege Escalation Vulnerability in Adobe RoboHelp
    cvelistv5