Skip to content
CVE PROGRAM SOURCE RECORD8.1 High

CVE-2025-24876

Authentication bypass via authorization code injection in SAP Approuter

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
sap

Description

The SAP Approuter Node.js package version v16.7.1 and before is vulnerable to Authentication bypass. When trading an authorization code an attacker can steal the session of the victim by injecting malicious payload causing High impact on confidentiality and integrity of the application

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP_SE SAP Approuter Node.js package

Default version status: unaffected

  • 2.6.1 to 16.7.1affected

References