Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2023-4551

Опубликовано: 29 янв. 2024
Источник: nvd
CVSS3: 7.2
CVSS3: 8.8
EPSS Низкий

Описание

Improper Input Validation vulnerability in OpenText AppBuilder on Windows, Linux allows OS Command Injection.

The AppBuilder's Scheduler functionality that facilitates creation of scheduled tasks is vulnerable to command injection. This allows authenticated users to inject arbitrary operating system commands into the executing process.

This issue affects AppBuilder: from 21.2 before 23.2.

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:opentext:appbuilder:*:*:*:*:*:*:*:*
Версия от 21.2 (включая) до 23.2 (исключая)

Одно из

cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

EPSS

Процентиль: 33%
0.00128
Низкий

7.2 High

CVSS3

8.8 High

CVSS3

Дефекты

CWE-20
NVD-CWE-noinfo

Связанные уязвимости

CVSS3: 7.2
github
около 2 лет назад

Improper Input Validation vulnerability in OpenText AppBuilder on Windows, Linux allows OS Command Injection. The AppBuilder's Scheduler functionality that facilitates creation of scheduled tasks is vulnerable to command injection. This allows authenticated users to inject arbitrary operating system commands into the executing process. This issue affects AppBuilder: from 21.2 before 23.2.

EPSS

Процентиль: 33%
0.00128
Низкий

7.2 High

CVSS3

8.8 High

CVSS3

Дефекты

CWE-20
NVD-CWE-noinfo