Security Advisory
CVE-2023-49583
9.1
CRITICAL
Vulnerability Description
SAP BTP Security Services Integration Library ([Node.js] @sap/xssec - versions < 3.6.0, allow under certain conditions an escalation of privileges. On successful exploitation, an unauthenticated attacker can obtain arbitrary permissions within the application.
Published Date
December 12, 2023
Official Source
NIST NVD Advisory