CVE-2023-49058
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2023
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
Directory Traversal vulnerability in SAP Master Data Governance
SAP Master Data Governance File Upload application allows an attacker to exploit insufficient validation of path information provided by users, thus characters representing ‘traverse to parent directory’ are passed through to the file APIs. As a result, it has a low impact to the confidentiality.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
SAP Master Data Governance
- Vendor
- SAP_SE
- Product
- SAP Master Data Governance
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| MDG_FND 731 | affected | Unavailable | Unavailable | Unavailable | None listed |
| MDG_FND 732 | affected | Unavailable | Unavailable | Unavailable | None listed |
| MDG_FND 746 | affected | Unavailable | Unavailable | Unavailable | None listed |
| MDG_FND 747 | affected | Unavailable | Unavailable | Unavailable | None listed |
| MDG_FND 748 | affected | Unavailable | Unavailable | Unavailable | None listed |
| MDG_FND 749 | affected | Unavailable | Unavailable | Unavailable | None listed |
| MDG_FND 752 | affected | Unavailable | Unavailable | Unavailable | None listed |
| MDG_FND 800 | affected | Unavailable | Unavailable | Unavailable | None listed |
| MDG_FND 802 | affected | Unavailable | Unavailable | Unavailable | None listed |
| MDG_FND 803 | affected | Unavailable | Unavailable | Unavailable | None listed |
| MDG_FND 804 | affected | Unavailable | Unavailable | Unavailable | None listed |
| MDG_FND 805 | affected | Unavailable | Unavailable | Unavailable | None listed |
| MDG_FND 806 | affected | Unavailable | Unavailable | Unavailable | None listed |
| MDG_FND 807 | affected | Unavailable | Unavailable | Unavailable | None listed |
| MDG_FND 808 | affected | Unavailable | Unavailable | Unavailable | None listed |
| SAP_BS_FND 702 | affected | Unavailable | Unavailable | Unavailable | None listed |