Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2023-4552

Опубликовано: 29 янв. 2024
Источник: nvd
CVSS3: 5.5
CVSS3: 7.1
EPSS Низкий

Описание

Improper Input Validation vulnerability in OpenText AppBuilder on Windows, Linux allows Probe System Files.

An authenticated AppBuilder user with the ability to create or manage existing databases can leverage them to exploit the AppBuilder server - including access to its local file system.

This issue affects AppBuilder: from 21.2 before 23.2.

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:opentext:appbuilder:*:*:*:*:*:*:*:*
Версия от 21.2 (включая) до 23.2 (исключая)

Одно из

cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

EPSS

Процентиль: 17%
0.00055
Низкий

5.5 Medium

CVSS3

7.1 High

CVSS3

Дефекты

CWE-20
NVD-CWE-noinfo

Связанные уязвимости

CVSS3: 5.5
github
около 2 лет назад

Improper Input Validation vulnerability in OpenText AppBuilder on Windows, Linux allows Probe System Files. An authenticated AppBuilder user with the ability to create or manage existing databases can leverage them to exploit the AppBuilder server - including access to its local file system. This issue affects AppBuilder: from 21.2 before 23.2.

EPSS

Процентиль: 17%
0.00055
Низкий

5.5 Medium

CVSS3

7.1 High

CVSS3

Дефекты

CWE-20
NVD-CWE-noinfo