VULNERABILITY INTELLIGENCE

CVE-2023-49058

CVSS score3.5 LOW
EPSS probability0.63%
CISA KEVNot currently listed
Published2023-12-12
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N

Description

SAP Master Data Governance File Upload application allows an attacker to exploit insufficient validation of path information provided by users, thus characters representing ‘traverse to parent directory’ are passed through to the file APIs. As a result, it has a low impact to the confidentiality.

Weakness classification

  • cna@sap.com: CWE-22

Primary references