CVE-2023-49583 (published 2023-12-12T01:22:58.910Z)
SAP BTP Security Services Integration Library ([Node.js] @sap/xssec - versions < 3.6.0, allow under certain conditions an escalation of privileges. On successful exploitation, an unauthenticated attacker can obtain arbitrary permissions within the application.


Affected products: Vendor: SAP_SE
Product: @sap/xssec
Versions: < 3.6.0