VULNERABILITY INTELLIGENCE

CVE-2023-4552

CVSS score5.5 MEDIUM
EPSS probability0.37%
CISA KEVNot currently listed
Published2024-01-29
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N

Description

Improper Input Validation vulnerability in OpenText AppBuilder on Windows, Linux allows Probe System Files. An authenticated AppBuilder user with the ability to create or manage existing databases can leverage them to exploit the AppBuilder server - including access to its local file system. This issue affects AppBuilder: from 21.2 before 23.2.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references