PT-2020-19012
CVE-2020-6213
·
تاريخ النشر
2020-04-24
·
تاريخ التحديث
2020-05-05
الوصف من
CVSS 3.1
6.1
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
SAP NetWeaver AS ABAP Business Server Pages Test Application SBSPEXT PHTMLB versions 700 through 754
Description
The issue is related to reflected Cross-Site Scripting (XSS) due to insufficient encoding of user-controlled inputs via different URL parameters.
Recommendations
For versions 700 through 754, ensure that user-controlled inputs are properly encoded to prevent XSS attacks. As a temporary workaround, consider restricting access to the SBSPEXT PHTMLB application until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾