{"id":"CVE-2023-4552","state":"PUBLISHED","title":"Java Database Connectivity (JDBC) URL Manipulation","description":"Improper Input Validation vulnerability in OpenText AppBuilder on Windows, Linux allows Probe System Files.\n\nAn authenticated AppBuilder user with the ability to create or manage existing databases can leverage them to exploit the AppBuilder server - including access to its local file system.\n\n\nThis issue affects AppBuilder: from 21.2 before 23.2.\n\n","publishedAt":"2024-01-29T20:56:35.378Z","updatedAt":"2025-06-17T21:29:16.913Z","severity":{"score":5.5,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N","source":"OpenText"},"assigner":"OpenText","products":["OpenText AppBuilder"],"affected":[{"vendor":"OpenText","product":"AppBuilder","defaultStatus":"unaffected","versions":[{"version":"23.2","status":"unaffected"},{"version":"21.2","status":"affected","lessThan":"23.2","versionType":"custom"}],"platforms":["Windows","Linux"]}],"references":["https://support.opentext.com/csm?id=ot_kb_search&kb_category=61648712db61781068cfd6c4e296197b"],"weaknesses":["CWE-20"],"ingestedAt":"2026-10-29T20:06:33.064Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/4xxx/CVE-2023-4552.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2023-4552","state":"PUBLISHED","datePublished":"2024-01-29T20:56:35.378Z","dateUpdated":"2025-06-17T21:29:16.913Z","assignerShortName":"OpenText","assignerOrgId":"f81092c5-7f14-476d-80dc-24857f90be84","dateReserved":"2023-08-25T16:55:07.111Z"},"containers":{"cna":{"title":"Java Database Connectivity (JDBC) URL Manipulation","descriptions":[{"lang":"en","value":"Improper Input Validation vulnerability in OpenText AppBuilder on Windows, Linux allows Probe System Files.\n\nAn authenticated AppBuilder user with the ability to create or manage existing databases can leverage them to exploit the AppBuilder server - including access to its local file system.\n\n\nThis issue affects AppBuilder: from 21.2 before 23.2.\n\n"}],"affected":[{"vendor":"OpenText","product":"AppBuilder","defaultStatus":"unaffected","versions":[{"version":"23.2","status":"unaffected"},{"version":"21.2","status":"affected","lessThan":"23.2","versionType":"custom"}],"platforms":["Windows","Linux"]}],"references":[{"url":"https://support.opentext.com/csm?id=ot_kb_search&kb_category=61648712db61781068cfd6c4e296197b"}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.5,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"LOW","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-20","description":"CWE-20 Improper Input Validation","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"OpenText","orgId":"f81092c5-7f14-476d-80dc-24857f90be84","dateUpdated":"2024-01-29T20:56:35.378Z"},"credits":[{"lang":"en","type":"finder","user":"00000000-0000-4000-9000-000000000000","value":"George Mathias"}],"impacts":[{"capecId":"CAPEC-639","descriptions":[{"lang":"en","value":"CAPEC-639 Probe System Files"}]}],"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.1.0-dev"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://support.opentext.com/csm?id=ot_kb_search&kb_category=61648712db61781068cfd6c4e296197b","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T07:31:06.382Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2023-4552","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2024-02-05T16:38:34.558951Z"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-06-17T21:29:16.913Z"}}]}}}