Lucene search
PRIOn knowledge basePRION:CVE-2023-4554HistoryJan 29, 2024 - 9:15 p.m.
Xxe
2024-01-2921:15:00
PRIOn knowledge base
www.prio-n.com
4
opentext appbuilder
windows
linux
xxe
server side request forgery
xml processor
Improper Restriction of XML External Entity Reference vulnerability in OpenText AppBuilder on Windows, Linux allows Server Side Request Forgery, Probe System Files.
AppBuilder’s XML processor is vulnerable to XML External Entity Processing (XXE), allowing an authenticated user to upload specially crafted XML files to induce server-side request forgery, disclose files local to the server that processes them.
This issue affects AppBuilder: from 21.2 before 23.2.
| CPE | Name | Operator | Version |
|---|---|---|---|
| appbuilder | ge | 21.2 | |
| appbuilder | lt | 23.2 |
Related
nvd
nvd
CVE-2023-4554
2024-01-29 21:15:09
cve
cve
CVE-2023-4554
2024-01-29 21:15:09
cvelist
cvelist
CVE-2023-4554 XML External Entity (XXE) Processing
2024-01-29 20:56:49