Описание
SAP Approuter does not sufficiently sanitize certain request headers before forwarding traffic to internal components. An unauthenticated attacker could send a specially crafted request to obtain limited unauthorized access to information. This results in a low impact on confidentiality. There is no impact on integrity and availability.
Ссылки
- Permissions Required
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 23.0.0 (исключая)
cpe:2.3:a:sap:approuter:*:*:*:*:*:node.js:*:*
EPSS
Процентиль: 15%
0.00234
Низкий
5.3 Medium
CVSS3
Дефекты
CWE-644
Связанные уязвимости
CVSS3: 5.3
github
около 1 месяца назад
SAP Approuter does not sufficiently sanitize certain request headers before forwarding traffic to internal components. An unauthenticated attacker could send a specially crafted request to obtain limited unauthorized access to information. This results in a low impact on confidentiality. There is no impact on integrity and availability.
EPSS
Процентиль: 15%
0.00234
Низкий
5.3 Medium
CVSS3
Дефекты
CWE-644