CVE-2023-41369

Name of the Vulnerable Software and Affected Versions SAP S/4HANA versions 100 through 108

Description The issue allows an attacker to upload an XML file as an attachment in the Create Single Payment application. When the XML file is clicked on in the attachment section, it opens in the browser and can cause entity loops, slowing down the browser.

Recommendations For SAP S/4HANA versions 100 through 108, consider restricting the upload of XML files in the Create Single Payment application to prevent potential exploitation. As a temporary workaround, avoid clicking on XML files in the attachment section to minimize the risk of browser slowdown.