CVE-2023-4550: Unauthenticated Arbitrary File Read
Improper Input Validation, Files or Directories Accessible to External Parties vulnerability in OpenText AppBuilder on Windows, Linux allows Probe System Files.
An unauthenticated or authenticated user can abuse a page of AppBuilder to read arbitrary files on the server on which it is hosted.
This issue affects AppBuilder: from 21.2 before 23.2.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-4550?
CVE-2023-4550 is classified as having a medium severity due to improper input validation allowing unauthorized access to sensitive files.
How do I fix CVE-2023-4550?
To fix CVE-2023-4550, ensure that appropriate access controls and input validation mechanisms are implemented in OpenText AppBuilder.
Who is affected by CVE-2023-4550?
CVE-2023-4550 affects users of OpenText AppBuilder versions between 21.2 and 23.2 on both Windows and Linux.
What types of vulnerabilities does CVE-2023-4550 represent?
CVE-2023-4550 represents an improper input validation vulnerability that can lead to information disclosure.
Can an authenticated user exploit CVE-2023-4550?
Yes, both unauthenticated and authenticated users can exploit CVE-2023-4550 to read arbitrary files on the server.