Sap Approuter Node.Js Package
Approved changes feed: RSS · Atom
cpe:2.3:a:sap_se:sap_approuter_node.js_package:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Sap Se (f8f3f5db-c060-5230-a8bd-f91674203607) |
|---|---|
| Product | Sap Approuter Node.Js Package (c340f2fa-6067-5cf6-a4b3-d24ac7c5c7b0) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-24876 |
vulnerable | 2026-06-08 07:12:50.120364 |
Authentication bypass via authorization code injection in SAP Approuter
HIGH (8.1)
The SAP Approuter Node.js package version v16.7.1 and before is vulnerable to Authentication bypass. When trading an authorization code an attacker can steal the session of the victim by injecting malicious payload causing High impact on confidentiality and integrity of the application
Published: 2025-02-11T00:37:40.988Z
Updated: 2025-02-21T16:46:32.934Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.