CVE:CVE-2023-34203
CNNVD:CNNVD-202306-1788
Progress OpenEdge是一款应用程序。
Progress OpenEdge LTS 11.7.16之前版本、12.x版本至12.2.12之前版本、12.3.x版本至12.6.x版本存在安全漏洞，该漏洞源于远程用户可以执行 URL 注入攻击来更改身份或角色成员资格，例如升级为管理员。
solution:Upgrade progress openedge to a higher version than 11.7.16,12.2.12,12.7,and avoid the version (,11.7.16),[12.0,12.2.12),[12.3,12.7); Upgrade progress openedge_explorer to a higher version than 12.7,and avoid the version (,12.7); Upgrade progress openedge_management to a higher version than 12.7,and avoid the version (,12.7)