https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T00:46:56.936401+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2023-50423 CVE-2023-50423 — Escalation of Privileges in SAP BTP Security Services Integration Library ([Python] cloud-pysec) 2026-10-03T00:46:56.974692+00:00

Affected: SAP_SE sap-xssec

SAP BTP Security Services Integration Library ([Python] sap-xssec) - versions < 4.1.0, allow under certain conditions an escalation of privileges. On successful exploitation, an unauthenticated attacker can obtain arbitrary permissions within the application.

 https://cve.radiocsirt.org/vuln/ghsa-6mjg-37cp-42x5 GHSA-6mjg-37cp-42x5 — Improper Privilege Management in sap-xssec 2026-10-03T00:46:56.974774+00:00

Affected: PyPI: sap-xssec

### Impact

SAP BTP Security Services Integration Library ([Python] sap-xssec) allows under certain conditions an escalation of privileges. On successful exploitation, an unauthenticated attacker can obtain arbitrary permissions within the application.

### Patches Upgrade to patched version >= 4.1.0 We always recommend to upgrade to the latest released version.

### Workarounds No workarounds

### References https://www.cve.org/CVERecord?id=CVE-2023-50423