PT-2021-20244
CVE-2021-33666
·
تاريخ النشر
2021-06-09
·
تاريخ التحديث
2021-06-21
الوصف من
CVSS 3.1
6.1
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions:
SAP Commerce Cloud version 100
Description:
The issue concerns MIME sniffing, which under certain circumstances could facilitate an XSS attack or malware proliferation when SAP Commerce Cloud hosts a JavaScript storefront.
Recommendations:
For SAP Commerce Cloud version 100, consider implementing proper MIME type handling to prevent MIME sniffing attacks, which could help mitigate the risk of XSS or malware proliferation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾