CVE-2023-4552CWE-20

Java Database Connectivity (JDBC) URL Manipulation

Medium · published January 29, 2024

CVSS v3.1
5.5
EPSS
0%
Percentile
29.7
In the wild
Unconfirmed
What it is

Improper Input Validation vulnerability in OpenText AppBuilder on Windows, Linux allows Probe System Files.

An authenticated AppBuilder user with the ability to create or manage existing databases can leverage them to exploit the AppBuilder server - including access to its local file system.

This issue affects AppBuilder: from 21.2 before 23.2.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00370 · 29.7th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2024-01-29T20:56Z
EPSS history
Timeline
  • 29 JAN 20:56Z
    Java Database Connectivity (JDBC) URL Manipulation
    cvelistv5