PT-2024-13249
CVE-2023-4553
·
تاريخ النشر
2024-01-29
·
تاريخ التحديث
2024-02-05
الوصف من
CVSS 3.1
5.3
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
OpenText AppBuilder versions 21.2 through 23.2
Description
The issue is related to improper input validation, allowing unauthenticated users to view AppBuilder configuration files. This enables probing of system files.
Recommendations
For versions 21.2 through 23.2, update to version 23.2 or later to resolve the issue.
As a temporary workaround, consider restricting access to AppBuilder configuration files until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾