@sap/xssec vulnerabilities

2 known vulnerabilities in @sap/xssec from SAP. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  sap-xssec: Exposed Dangerous Method or Function

  CVE-2023-50423Dec 12, 2023SAPEPSS 1.11%

  SAP BTP Security Services Integration Library ([Python] sap-xssec) - versions < 4.1.0, allow under certain conditions an escalation of privileges. On successful exploitation, an unauthenticated attacker can obtain arbitrary permissions within the application.

• 9.8 Critical severity

  @sap/xssec: Exposed Dangerous Method or Function

  CVE-2023-49583Dec 12, 2023SAPEPSS 1.08%

  SAP BTP Security Services Integration Library ([Node.js] @sap/xssec - versions < 3.6.0, allow under certain conditions an escalation of privileges. On successful exploitation, an unauthenticated attacker can obtain arbitrary permissions within the application.