CVE-2023-4550

Unauthenticated Arbitrary File Read

State: Published
Severity: 7.5 High
Published: Jan 29, 2024
Updated: Nov 12, 2024
Reserved: Aug 25, 2023

Description

Improper Input Validation, Files or Directories Accessible to External Parties vulnerability in OpenText AppBuilder on Windows, Linux allows Probe System Files.

An unauthenticated or authenticated user can abuse a page of AppBuilder to read arbitrary files on the server on which it is hosted.

This issue affects AppBuilder: from 21.2 before 23.2.

Scores

CVSS	Score	Vector	Source
3.1	7.5 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N	OpenText

Weaknesses

CWE-20 Improper Input Validation
CWE-552 Files or Directories Accessible to External Parties

Affected Products

Product	Versions
AppBuilderOpenText	23.2Not affected 21.2 to before 23.2Affected

References

https://support.opentext.com/csm?id=ot_kb_search&kb_category=61648712db61781068cfd6c4e296197b

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.