Skip to content
CVE PROGRAM SOURCE RECORD3.5 Low

CVE-2023-49058

Directory Traversal vulnerability in SAP Master Data Governance

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
sap

Description

SAP Master Data Governance File Upload application allows an attacker to exploit insufficient validation of path information provided by users, thus characters representing ‘traverse to parent directory’ are passed through to the file APIs. As a result, it has a low impact to the confidentiality.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP_SE SAP Master Data Governance

Default version status: unaffected

  • MDG_FND 731affected
  • MDG_FND 732affected
  • MDG_FND 746affected
  • MDG_FND 747affected
  • MDG_FND 748affected
  • MDG_FND 749affected
  • MDG_FND 752affected
  • MDG_FND 800affected
  • MDG_FND 802affected
  • MDG_FND 803affected
  • MDG_FND 804affected
  • MDG_FND 805affected
  • MDG_FND 806affected
  • MDG_FND 807affected
  • MDG_FND 808affected
  • SAP_BS_FND 702affected

References