SAP Note 3567974
Authentication bypass via authorization code injection in SAP Approuter
HighCVSS 8.1@sap/approuter
- CVE(s)
- CVE-2025-24876
- CVSS vector
- CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Affected products and versions
- Library @sap/approuter
Versions: 2.6.1 to 16.7.1
Appears in
Patch Days listing this note, newest first.
- March 2025Updateupdate of February 2025 noteHighCVSS 8.1
- February 2025NewHighCVSS 8.1