CVE-2023-4550

Improper Input Validation, Files or Directories Accessible to External Parties vulnerability in OpenText AppBuilder on Windows, Linux allows Probe System Files. An unauthenticated or authenticated user can abuse a page of AppBuilder to read arbitrary files on the server on which it is hosted. This issue affects AppBuilder: from 21.2 before 23.2.

Score

CVSS 3.1 7.5 High

Status

Modified - security@opentext.com

Published

2024-01-29

Last modified

2024-11-12

Weaknesses

CWE-20, CWE-552

Affected products

• Appbuilder (Opentext)

References

• https://support.opentext.com/csm?id=ot_kb_search&kb_category=61648712db61781068cfd6c4e296197b