CVE-2021-28588

CVE-2021-28588 is a Path Traversal vulnerability affecting Adobe RoboHelp Server version 2019.0.9 and earlier. An authenticated attacker can exploit this without user interaction by sending a crafted HTTP POST request, leading to arbitrary code execution in the context of the current user. This vulnerability carries a CVSS score of 8.8 (HIGH), indicating a severe risk due to its network-based attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. While no active exploitation, public exploit code, or significant community discussion has been observed, its high EPSS and FAUCET Risk Score suggest a notable potential for future exploitation.