CVE-2023-4554

Summary

CVE-2023-4554 is a vulnerability affecting OpenText AppBuilder on both Windows and Linux platforms. This issue involves an Improper Restriction of XML External Entity Reference, leading to Server Side Request Forgery (SSRF) and potential file disclosure. Authenticated users can exploit this vulnerability by uploading specially crafted XML files to induce SSRF and reveal system files processed by the server. AppBuilder versions prior to 23.2 are susceptible to this issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.