CVE-2024-45277
Prototype Pollution vulnerability in SAP HANA Client
- State
- Published
- Severity
- 4.3 Medium
- Published
- Oct 8, 2024
- Updated
- Oct 8, 2024
- Reserved
- Aug 26, 2024
Description
The SAP HANA Node.js client package versions from 2.0.0 before 2.21.31 is impacted by Prototype Pollution vulnerability allowing an attacker to add arbitrary properties to global object prototypes. This is due to improper user input sanitation when using the nestTables feature causing low impact on the availability of the application. This has no impact on Confidentiality and Integrity.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 4.3 Medium | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L | sap |
Weaknesses
- CWE-1321 Improperly Controlled Modification of Object Prototype Attributes
Affected Products
| Product | Versions |
|---|---|
SAP HANA ClientSAP_SE |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.