CVE-2023-4551 — Command Injection via Task Scheduler
Improper Input Validation vulnerability in OpenText AppBuilder on Windows, Linux allows OS Command Injection. The AppBuilder's Scheduler functionality that facilitates creation…
Published: 2024-01-29 · CVSS: 7.2 · CVSS 3.1
Improper Input Validation vulnerability in OpenText AppBuilder on Windows, Linux allows OS Command Injection. The AppBuilder's Scheduler functionality that facilitates creation of scheduled tasks is vulnerable to command injection. This allows authenticated users to inject arbitrary operating system commands into the executing process. This issue affects AppBuilder: from 21.2 before 23.2.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7