PT-2023-4944 · Sap · Sap S/4Hana
CVE-2023-40306
·
Publicado
2023-08-14
·
Atualizado
2023-09-13
CVSS v2.0
6.4
Média
| Vetor | AV:N/AC:L/Au:N/C:P/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
SAP S/4HANA (affected versions not specified)
Description
The issue is related to insufficient URL validation in the Manage Catalog Items and Cross-Catalog searches Fiori apps, allowing an attacker to redirect users to a malicious site. This may have a slight impact on confidentiality and integrity. The exploitation of this issue can enable a remote attacker to redirect a user to an arbitrary URL.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Open Redirect
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Sap S/4Hana