PT-2021-14544
CVE-2021-21476
·
تاريخ النشر
2021-02-09
·
تاريخ التحديث
2021-04-01
الوصف من
CVSS 3.1
6.1
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
SAP UI5 versions before 1.38.49
SAP UI5 versions before 1.52.49
SAP UI5 versions before 1.60.34
SAP UI5 versions before 1.71.31
SAP UI5 versions before 1.78.18
SAP UI5 versions before 1.84.5
SAP UI5 versions before 1.85.4
SAP UI5 versions before 1.86.1
Description
The issue allows an unauthenticated attacker to redirect users to a malicious site due to Reverse Tabnabbing vulnerabilities.
Recommendations
For SAP UI5 version before 1.38.49, update to version 1.38.49 or later.
For SAP UI5 version before 1.52.49, update to version 1.52.49 or later.
For SAP UI5 version before 1.60.34, update to version 1.60.34 or later.
For SAP UI5 version before 1.71.31, update to version 1.71.31 or later.
For SAP UI5 version before 1.78.18, update to version 1.78.18 or later.
For SAP UI5 version before 1.84.5, update to version 1.84.5 or later.
For SAP UI5 version before 1.85.4, update to version 1.85.4 or later.
For SAP UI5 version before 1.86.1, update to version 1.86.1 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾