GHSA-G76P-CFX7-WH4J高危未审查

无摘要

OSV 1.4.0 · unreviewed · 修改于 2026-08-25 11:32

发布时间

2026-08-25 11:32

GitHub 审查时间

—

NVD 发布时间

2026-08-25 09:16

源文件

advisories/unreviewed/2026/08/GHSA-g76p-cfx7-wh4j/GHSA-g76p-cfx7-wh4j.json

公告说明

SAP S/4HANA (Private Cloud) uses a third-party component that contains a Regular Expression Denial of Service (ReDoS) vulnerability. An unauthenticated attacker could supply specially crafted input that triggers excessive processing within the affected functionality. Successful exploitation could exhaust system resources and make the service unavailable, resulting in a high impact on availability. There is no impact on confidentiality and integrity.

受影响的软件包

该公告没有提供结构化的受影响软件包信息。

参考链接

ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2026-66766

标识信息

别名 / CVE

CVE-2026-66766

CWE

CWE-1333

软件生态

无

扩展资料

暂无扩展资料。

CVSS 评分

CVSS_V3

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

原始 OSV JSON

{
  "id": "GHSA-g76p-cfx7-wh4j",
  "aliases": [
    "CVE-2026-66766"
  ],
  "details": "SAP S/4HANA (Private Cloud) uses a third-party component that contains a Regular Expression Denial of Service (ReDoS) vulnerability. An unauthenticated attacker could supply specially crafted input that triggers excessive processing within the affected functionality. Successful exploitation could exhaust system resources and make the service unavailable, resulting in a high impact on availability. There is no impact on confidentiality and integrity.",
  "affected": [],
  "modified": "2026-08-25T03:32:08Z",
  "severity": [
    {
      "type": "CVSS_V3",
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
    }
  ],
  "published": "2026-08-25T03:32:08Z",
  "references": [
    {
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-66766",
      "type": "ADVISORY"
    },
    {
      "url": "https://me.sap.com/notes/3771065",
      "type": "WEB"
    },
    {
      "url": "https://url.sap/sapsecuritypatchday",
      "type": "WEB"
    }
  ],
  "schema_version": "1.4.0",
  "database_specific": {
    "cwe_ids": [
      "CWE-1333"
    ],
    "severity": "HIGH",
    "github_reviewed": false,
    "nvd_published_at": "2026-08-25T01:16:37Z",
    "github_reviewed_at": null
  }
}