Odata
Monthly
Open redirect exploitation in SAP's python-pyodata library (versions before 1.11.2) allows a malicious or compromised OData service to capture sensitive authentication information transmitted by the client and inject untrusted data into the consuming application. Applications using pyodata that connect to externally controlled or attacker-reachable OData endpoints are at risk of credential disclosure and data integrity compromise. No public exploit code has been identified at time of analysis, and the vulnerability has not been listed in CISA KEV, but a vendor-released patch is available at version 1.11.2.
Open redirect exploitation in SAP's python-pyodata library (versions before 1.11.2) allows a malicious or compromised OData service to capture sensitive authentication information transmitted by the client and inject untrusted data into the consuming application. Applications using pyodata that connect to externally controlled or attacker-reachable OData endpoints are at risk of credential disclosure and data integrity compromise. No public exploit code has been identified at time of analysis, and the vulnerability has not been listed in CISA KEV, but a vendor-released patch is available at version 1.11.2.