Skip to content
OpenAdvisories
High · 7.5 CVE-2023-4550 EUVD-2023-54405GHSA-crgw-m82j-jv5c

Unauthenticated Arbitrary File Read

Published Jan 29, 2024 · Updated Nov 12, 2024 · Assigned by OpenText

Description

Improper Input Validation, Files or Directories Accessible to External Parties vulnerability in OpenText AppBuilder on Windows, Linux allows Probe System Files.

An unauthenticated or authenticated user can abuse a page of AppBuilder to read arbitrary files on the server on which it is hosted.

This issue affects AppBuilder: from 21.2 before 23.2.

Affected products

VendorProductAffectedFixed
OpenText AppBuilder 21.2 – < 23.2 23.2

References