TI-2023-26731 Aliases CVE-2023-49058 GHSA-fwfm-f7pg-rq6r

Directory Traversal vulnerability in SAP Master Data Governance

LOW 25CWE-22Published 2023-12-12 · Updated 2024-08-02

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: Low
Impact type: Information disclosure
Confidentiality · integrity · availability: Low · None · None
Fix status: No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-22 and the CVSS impact.

Summary

SAP Master Data Governance File Upload application allows an attacker to exploit insufficient validation of path information provided by users, thus characters representing ‘traverse to parent directory’ are passed through to the file APIs. As a result, it has a low impact to the confidentiality.

Why it matters now

EPSS 0.00625 50th percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
SAP	SAP Master Data Governance	MDG_FND 731; MDG_FND 732; MDG_FND 746; MDG_FND 747; MDG_FND 748; MDG_FND 749; MDG_FND 752; MDG_FND 800; MDG_FND 802; MDG_FND 803; MDG_FND 804; MDG_FND 805; MDG_FND 806; MDG_FND 807; MDG_FND 808; SAP_BS_FND 702	—	No fix listed	CNA

SAP Master Data Governance VendorSAP Affected MDG_FND 731; MDG_FND 732; MDG_FND 746; MDG_FND 747; MDG_FND 748; MDG_FND 749; MDG_FND 752; MDG_FND 800; MDG_FND 802; MDG_FND 803; MDG_FND 804; MDG_FND 805; MDG_FND 806; MDG_FND 807; MDG_FND 808; SAP_BS_FND 702 Fixed in — No fix listed CNA

CPE configurations NVD · 17

CPE	Versions	Role	Vendor
cpe:2.3:a:sap:master_data_governance:731:::::::*	731	Vulnerable	SAP
cpe:2.3:a:sap:master_data_governance:732:::::::*	732	Vulnerable	SAP
cpe:2.3:a:sap:master_data_governance:746:::::::*	746	Vulnerable	SAP
cpe:2.3:a:sap:master_data_governance:747:::::::*	747	Vulnerable	SAP
cpe:2.3:a:sap:master_data_governance:748:::::::*	748	Vulnerable	SAP
cpe:2.3:a:sap:master_data_governance:749:::::::*	749	Vulnerable	SAP
cpe:2.3:a:sap:master_data_governance:751:::::::*	751	Vulnerable	SAP
cpe:2.3:a:sap:master_data_governance:752:::::::*	752	Vulnerable	SAP
cpe:2.3:a:sap:master_data_governance:800:::::::*	800	Vulnerable	SAP
cpe:2.3:a:sap:master_data_governance:801:::::::*	801	Vulnerable	SAP

cpe:2.3:a:sap:master_data_governance:731:*:*:*:*:*:*:* Versions 731 Vulnerable ·SAP
cpe:2.3:a:sap:master_data_governance:732:*:*:*:*:*:*:* Versions 732 Vulnerable ·SAP
cpe:2.3:a:sap:master_data_governance:746:*:*:*:*:*:*:* Versions 746 Vulnerable ·SAP
cpe:2.3:a:sap:master_data_governance:747:*:*:*:*:*:*:* Versions 747 Vulnerable ·SAP
cpe:2.3:a:sap:master_data_governance:748:*:*:*:*:*:*:* Versions 748 Vulnerable ·SAP
cpe:2.3:a:sap:master_data_governance:749:*:*:*:*:*:*:* Versions 749 Vulnerable ·SAP
cpe:2.3:a:sap:master_data_governance:751:*:*:*:*:*:*:* Versions 751 Vulnerable ·SAP
cpe:2.3:a:sap:master_data_governance:752:*:*:*:*:*:*:* Versions 752 Vulnerable ·SAP
cpe:2.3:a:sap:master_data_governance:800:*:*:*:*:*:*:* Versions 800 Vulnerable ·SAP
cpe:2.3:a:sap:master_data_governance:801:*:*:*:*:*:*:* Versions 801 Vulnerable ·SAP

Show 7 more CPE

CPE	Versions	Role	Vendor
cpe:2.3:a:sap:master_data_governance:802:::::::*	802	Vulnerable	SAP
cpe:2.3:a:sap:master_data_governance:803:::::::*	803	Vulnerable	SAP
cpe:2.3:a:sap:master_data_governance:804:::::::*	804	Vulnerable	SAP
cpe:2.3:a:sap:master_data_governance:805:::::::*	805	Vulnerable	SAP
cpe:2.3:a:sap:master_data_governance:806:::::::*	806	Vulnerable	SAP
cpe:2.3:a:sap:master_data_governance:807:::::::*	807	Vulnerable	SAP
cpe:2.3:a:sap:master_data_governance:808:::::::*	808	Vulnerable	SAP

cpe:2.3:a:sap:master_data_governance:802:*:*:*:*:*:*:* Versions 802 Vulnerable ·SAP
cpe:2.3:a:sap:master_data_governance:803:*:*:*:*:*:*:* Versions 803 Vulnerable ·SAP
cpe:2.3:a:sap:master_data_governance:804:*:*:*:*:*:*:* Versions 804 Vulnerable ·SAP
cpe:2.3:a:sap:master_data_governance:805:*:*:*:*:*:*:* Versions 805 Vulnerable ·SAP
cpe:2.3:a:sap:master_data_governance:806:*:*:*:*:*:*:* Versions 806 Vulnerable ·SAP
cpe:2.3:a:sap:master_data_governance:807:*:*:*:*:*:*:* Versions 807 Vulnerable ·SAP
cpe:2.3:a:sap:master_data_governance:808:*:*:*:*:*:*:* Versions 808 Vulnerable ·SAP

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2023-49058
2026-10-03 Alias added: GHSA-fwfm-f7pg-rq6r
2026-10-31 EPSS moved to the 50th–90th percentile
2026-11-02 EPSS moved to the below the 50th percentile
2026-11-03 EPSS moved to the 50th–90th percentile

References

Advisory 1

https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html

Other 1

https://me.sap.com/notes/3363690

TI-2020-05111 Missing authorization in SAP Master Data Governance CVSS 3.1MEDIUM 4.3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences