CVE-2023-25617
2 advisories.
PyPI/sap-ai-sdk-base CVE-2023-25617: high 8.8, EPSS 0.93%
SAP Cloud SDK for AI Python has OS Command Injection when Program Objects Execution is Enabled
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 3.3.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-xxhh-59gh-6ffx
- https://nvd.nist.gov/vuln/detail/CVE-2023-25617
- https://github.com/pypa/advisory-database/tree/main/vulns/sap-ai-sdk-base/PYSEC-2023-315.yaml
- https://launchpad.support.sap.com/#/notes/3283438
- https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
- https://www.sap.com/index.html
CVE-2023-25617 · published · modified · JSON
PyPI/sap-ai-sdk-base CVE-2023-25617: high 8.8, EPSS 0.93%
SAP Business Object (Adaptive Job Server) - versions 420, 430, allows remote execution of arbitrary commands on Unix, when program objects execution is enabled, to authenticated users with scheduling
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 420 |
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2023-315
- https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
- https://launchpad.support.sap.com/#/notes/3283438
- https://github.com/advisories/GHSA-xxhh-59gh-6ffx
CVE-2023-25617 · published · modified · JSON