CVE-2023-22643

An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in libzypp-plugin-appdata of SUSE Linux Enterprise Server for SAP 15-SP3; openSUSE Leap 15.4 allows attackers that can trick users to use specially crafted REPO_ALIAS, REPO_TYPE or REPO_METADATA_PATH settings to execute code as root. This issue affects: SUSE Linux Enterprise Server for SAP 15-SP3 libzypp-plugin-appdata versions prior to 1.0.1+git.20180426. openSUSE Leap 15.4 libzypp-plugin-appdata versions prior to 1.0.1+git.20180426.

• CWE-78

• https://bugzilla.suse.com/show_bug.cgi?id=1206836Exploit, Issue Tracking, Patch, Vendor Advisory
• https://bugzilla.suse.com/show_bug.cgi?id=1206836Exploit, Issue Tracking, Patch, Vendor Advisory

Published

Feb 7, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-22638Several improper neutralization of inputs during web page ge…5.4
• CVE-2023-22639A out-of-bounds write in Fortinet FortiOS version 7.2.0 thro…7.8
• CVE-2023-2264An improper input validation vulnerability in the Schweitzer…7.8
• CVE-2023-22640A out-of-bounds write in Fortinet FortiOS version 7.2.0 thro…8.8
• CVE-2023-22641A url redirection to untrusted site ('open redirect') in For…5.4
• CVE-2023-22642An improper certificate validation vulnerability [CWE-295] i…8.1
• CVE-2023-22644A user can reverse engineer the JWT token (JSON Web Token) u…5.5
• CVE-2023-22645An Improper Privilege Management vulnerability in SUSE kubew…8.8
• CVE-2023-22647An Improper Privilege Management vulnerability in SUSE Ranch…8
• CVE-2023-22648A Improper Privilege Management vulnerability in SUSE Ranche…8.8
• CVE-2023-22649A vulnerability has been identified which may lead to sensit…6.5
• CVE-2023-2265An Improper Restriction of Rendered UI Layers or Frames in t…6.1