CVE-2021-38182

Publication date

2021-12-14 15:44:13

Family

sap

State

PUBLISHED

Description

Due to insufficient input validation of Kyma, authenticated users can pass a Header of their choice and escalate privileges which can completely compromise the cluster.