CVE-2023-4550CWE-20CWE-552

Unauthenticated Arbitrary File Read

High · published January 29, 2024

CVSS v3.1
7.5
EPSS
0%
Percentile
39.5
In the wild
Unconfirmed
What it is

Improper Input Validation, Files or Directories Accessible to External Parties vulnerability in OpenText AppBuilder on Windows, Linux allows Probe System Files.

An unauthenticated or authenticated user can abuse a page of AppBuilder to read arbitrary files on the server on which it is hosted.

This issue affects AppBuilder: from 21.2 before 23.2.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00468 · 39.5th percentile
Weaknesses
CWE-20 · Improper Input Validation; CWE-552 · Files or Directories Accessible to External Parties
Published
2024-01-29T20:56Z
EPSS history
Timeline
  • 29 JAN 20:56Z
    Unauthenticated Arbitrary File Read
    cvelistv5