Description
Due to insufficient input validation in Kyma, authenticated users can pass a Header of their choice and escalate privileges.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SAP SE | Kyma | <1.24 | — |
High · 7.6
CVE-2021-33708
EUVD-2021-20385
Due to insufficient input validation in Kyma, authenticated users can pass a Header of their choice and escalate privileges.
Published Aug 10, 2021 · Updated Aug 3, 2024 · Assigned by sap