← CVE Intelligence

CVE-2023-4552

Java Database Connectivity (JDBC) URL Manipulation PUBLISHED

Description (CNA)

Improper Input Validation vulnerability in OpenText AppBuilder on Windows, Linux allows Probe System Files. An authenticated AppBuilder user with the ability to create or manage existing databases can leverage them to exploit the AppBuilder server - including access to its local file system. This issue affects AppBuilder: from 21.2 before 23.2.

Affected (CNA)

Vendor / productVersions
OpenText / AppBuilderunaffected 23.2; affected 21.2 before 23.2

CWE

CWE-20

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.