~ / search / GHSA-p2vx-qj66-88q3

GHSA-p2vx-qj66-88q3

Escalation of privileges in @sap/xssec

Source: GitHub Advisory Database (reviewed) Critical CVE-2023-49583

Packages

EcosystemPackageAffectedFixed in
npm @sap/xssec < 3.6.0 3.6.0

Details

As written in the advisory (Markdown source, shown as plain text).

SAP BTP Security Services Integration Library ([Node.js] @sap/xssec - versions < 3.6.0, allow under certain conditions an escalation of privileges. On successful exploitation, an unauthenticated attacker can obtain arbitrary permissions within the application.

References

External links from the advisory. They lead to third-party sites.