Loading HuntDB...

GHSA-42qx-rv8j-r8f3

GitHub Security Advisory

⚠ Unreviewed CRITICAL Has CVE

Advisory Details

SAP CommonCryptoLib does not perform necessary authentication checks, which may result in missing or wrong authorization checks for an authenticated user, resulting in escalation of privileges. Depending on the application and the level of privileges acquired, an attacker could abuse functionality restricted to a particular user group as well as read, modify or delete restricted data.

Related CVEs

Key Information

GHSA ID
GHSA-42qx-rv8j-r8f3
Published
September 15, 2023 6:30 PM
Last Modified
September 29, 2024 12:30 AM
CVSS Score
9.0 /10
Primary Ecosystem
Unknown
Primary Package
Unknown
GitHub Reviewed
✗ No

Dataset

Last updated: June 18, 2025 6:25 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.