Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-4551
HistoryJan 29, 2024 - 9:15 p.m.

Input validation

2024-01-2921:15:00
PRIOn knowledge base
www.prio-n.com
3
input validation
opentext appbuilder
command injection
scheduler
scheduled tasks
operating system commands
vulnerability
windows
linux
nvd

7.8 High

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

16.4%

Improper Input Validation vulnerability in OpenText AppBuilder on Windows, Linux allows OS Command Injection.

The AppBuilder’s Scheduler functionality that facilitates creation of scheduled tasks is vulnerable to command injection. This allows authenticated users to inject arbitrary operating system commands into the executing process.

This issue affects AppBuilder: from 21.2 before 23.2.

CPENameOperatorVersion
appbuilderge21.2
appbuilderlt23.2

7.8 High

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

16.4%

Related for PRION:CVE-2023-4551