cbcvebase.
CVE-2023-49058
published 2023-12-12

CVE-2023-49058: SAP Master Data Governance File Upload application allows an attacker to exploit insufficient validation of path information provided by users, thus characters…

PriorityP429medium5.3CVSS 3.1
AVNACLPRNUINSUCLINAN
EPSS
0.63%
45.8th percentile
SAP Master Data Governance File Upload application allows an attacker to exploit insufficient validation of path information provided by users, thus characters representing ‘traverse to parent directory’ are passed through to the file APIs. As a result, it has a low impact to the confidentiality.

Affected

33 ranges· showing 25
VendorProductVersion rangeFixed in
sapmaster_data_governance——
sapmaster_data_governance——
sapmaster_data_governance——
sapmaster_data_governance——
sapmaster_data_governance——
sapmaster_data_governance——
sapmaster_data_governance——
sapmaster_data_governance——
sapmaster_data_governance——
sapmaster_data_governance——
sapmaster_data_governance——
sapmaster_data_governance——
sapmaster_data_governance——
sapmaster_data_governance——
sapmaster_data_governance——
sapmaster_data_governance——
sapmaster_data_governance——
sap_sesap_master_data_governance——
sap_sesap_master_data_governance——
sap_sesap_master_data_governance——
sap_sesap_master_data_governance——
sap_sesap_master_data_governance——
sap_sesap_master_data_governance——
sap_sesap_master_data_governance——
sap_sesap_master_data_governance——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.