What is CVE-2023-49058?

CVE-2023-49058 is a low-severity vulnerability in Sap Master Data Governance, classified under Path Traversal. CVSS score: 3.5/10. Published 2023-12-12.

How severe is CVE-2023-49058?

Low severity. CVSS v3 base score is 3.5 out of 10.

Path Traversal in Sap Master Data Governance

CVE-2023-49058

SAP Master Data Governance File Upload application allows an attacker to exploit insufficient validation of path information provided by users, thus characters representing ‘traverse to parent directory’ are passed through to the file APIs. As a result, it has a low impact to the confidentiality.

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.006 (46.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 3.5 (Low). Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N.

Affected products

Sap Master_data_governance — versions 731, 732, 746
Sap_se Sap Master Data Governance — versions MDG_FND 731, MDG_FND 732, MDG_FND 746

Weakness classification (CWE)

CWE-22 — Path Traversal

References

cna@sap.com (Permissions Required)
cna@sap.com (Vendor Advisory)

Frequently asked questions

What is CVE-2023-49058?: CVE-2023-49058 is a low-severity vulnerability in Sap Master Data Governance, classified under Path Traversal. CVSS score: 3.5/10. Published 2023-12-12.
How severe is CVE-2023-49058?: Low severity. CVSS v3 base score is 3.5 out of 10.