PT-2020-19012
CVE-2020-6213
·
Published
2020-04-24
·
Updated
2020-05-05
Description by
CVSS 3.1
6.1
MediumMetricsAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
SAP NetWeaver AS ABAP Business Server Pages Test Application SBSPEXT PHTMLB versions 700 through 754
Description
The issue is related to reflected Cross-Site Scripting (XSS) due to insufficient encoding of user-controlled inputs via different URL parameters.
Recommendations
For versions 700 through 754, ensure that user-controlled inputs are properly encoded to prevent XSS attacks. As a temporary workaround, consider restricting access to the SBSPEXT PHTMLB application until a patch is available.
Found an issue in the description? Have something to add? Feel free to write us 👾