← CVE Intelligence

CVE-2023-4551

Command Injection via Task Scheduler PUBLISHED

Description (CNA)

Improper Input Validation vulnerability in OpenText AppBuilder on Windows, Linux allows OS Command Injection. The AppBuilder's Scheduler functionality that facilitates creation of scheduled tasks is vulnerable to command injection. This allows authenticated users to inject arbitrary operating system commands into the executing process. This issue affects AppBuilder: from 21.2 before 23.2.

Affected (CNA)

Vendor / productVersions
OpenText / AppBuilderunaffected 23.2; affected 21.2 before 23.2

CWE

CWE-20

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.