CVE-2023-4552 - CVE House
Back to Database
Status published Medium CVE-2023-4552

Java Database Connectivity (JDBC) URL Manipulation

Vulnerability Description

Improper Input Validation vulnerability in OpenText AppBuilder on Windows, Linux allows Probe System Files. An authenticated AppBuilder user with the ability to create or manage existing databases can leverage them to exploit the AppBuilder server - including access to its local file system. This issue affects AppBuilder: from 21.2 before 23.2.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-4552

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • George Mathias

Affected Vendor

Affected Software

AppBuilder
Vulnerable Versions:
23.2, 21.2

Timeline

Official Publish: January 29th, 2024
Last Modified: June 17th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N

Weaknesses (CWE)