CVE-2023-34317

An improper input validation vulnerability exists in the OAS Engine User Creation functionality of Open Automation Software OAS Platform v18.00.0072. A specially crafted series of network requests can lead to unexpected data in the configuration. An attacker can send a sequence of requests to trigger this vulnerability.

• CWE-20

• https://talosintelligence.com/vulnerability_reports/TALOS-2023-1772Exploit, Technical Description, Third Party Advisory
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1772Exploit, Technical Description, Third Party Advisory
• https://talosintelligence.com/vulnerability_reports/TALOS-2023-1772Exploit, Technical Description, Third Party Advisory
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1772Exploit, Technical Description, Third Party Advisory

Published

Sep 5, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-34310Ashlar-Vellum Cobalt Uninitialized Memory Remote Code Execut…7.8
• CVE-2023-34311Ashlar-Vellum Cobalt Untrusted Pointer Dereference Remote Co…7.8
• CVE-2023-34312In Tencent QQ through 9.7.8.29039 and TIM through 3.4.7.2208…7.8
• CVE-2023-34314Insecure inherited permissions in some Intel(R) Simics Simul…7.8
• CVE-2023-34315Incorrect default permissions in some Intel(R) VROC software…7.8
• CVE-2023-34316​An attacker could bypass the latest Delta Electronics Infra…7.5
• CVE-2023-34318A heap buffer overflow vulnerability was found in sox, in th…7.8
• CVE-2023-34319The fix for XSA-423 added logic to Linux'es netback driver t…7.8
• CVE-2023-3432Server-Side Request Forgery (SSRF) in GitHub repository plan…10
• CVE-2023-34320Cortex-A77 cores (r0p0 and r1p0) are affected by erratum 150…5.5
• CVE-2023-34321Arm provides multiple helpers to clean & invalidate the cach…3.3
• CVE-2023-34322For migration as well as to work around kernels unaware of L…7.8