vulnerability

SAP Discloses Critical CVSS 10 Flaw in Cloud SDK for Python Allowing OAuth2 Credential Theft

1d ago · The Hacker News · [email protected] (The Hacker News)

HighCVSS 10.0

Summary

SAP has disclosed a critical Server-Side Request Forgery (SSRF) vulnerability in its Cloud SDK for Python. The vulnerability exists in several SDK versions and has been addressed in later releases, but applications using older versions remain at risk. The vulnerability was initially fixed in August, but only fully addressed in later releases.

Read the full article at The Hacker News

Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data

Also covered by 1 other source(s)

SAP Patches Critical NetWeaver, S/4HANA Vulnerabilities · SecurityWeek · 14h ago

Report an error

news.mlab.sh

SAP Discloses Critical CVSS 10 Flaw in Cloud SDK for Python Allowing OAuth2 Credential Theft

Also covered by 1 other source(s)