CVE-2023-49058CWE-22

Directory Traversal vulnerability in SAP Master Data Governance

Low · published December 12, 2023

CVSS v3.1
3.5
EPSS
1%
Percentile
49.3
In the wild
Unconfirmed
What it is

SAP Master Data Governance File Upload application allows an attacker to exploit insufficient validation of path information provided by users, thus characters representing ‘traverse to parent directory’ are passed through to the file APIs. As a result, it has a low impact to the confidentiality.

The record
Technical detail
CVSS v3.1
3.5 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00625 · 49.3th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2023-12-12T01:01Z
EPSS history
Timeline
  • 12 DEC 01:01Z
    Directory Traversal vulnerability in SAP Master Data Governance
    cvelistv5