Skip to content
OpenAdvisories

Package · npm

@sap/xssec

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.1
    CVE-2023-49583

    Escalation of Privileges in SAP BTP Security Services Integration Library ([Node.js] @sap/xssec)

    SAP BTP Security Services Integration Library ([Node.js] @sap/xssec - versions < 3.6.0, allow under certain conditions an escalation of privileges. On successful exploitation, an unauthenticated attacker can obtain arbitrary permissions within the application.

    SAP @sap/xssec @sap/xssec npm