CVE-2023-49058
Directory Traversal vulnerability in SAP Master Data Governance
Vexday Risk Score
8Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 3.5EPSS 0.6%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
12 dic 2023Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
SAP Master Data Governance File Upload application allows an attacker to exploit insufficient validation of path information provided by users, thus characters representing ‘traverse to parent directory’ are passed through to the file APIs. As a result, it has a low impact to the confidentiality.
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N
Productos afectados
SAP_SE · SAP Master Data Governance¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →