CVE-2021-21476

Name of the Vulnerable Software and Affected Versions SAP UI5 versions before 1.38.49 SAP UI5 versions before 1.52.49 SAP UI5 versions before 1.60.34 SAP UI5 versions before 1.71.31 SAP UI5 versions before 1.78.18 SAP UI5 versions before 1.84.5 SAP UI5 versions before 1.85.4 SAP UI5 versions before 1.86.1

Description The issue allows an unauthenticated attacker to redirect users to a malicious site due to Reverse Tabnabbing vulnerabilities.

Recommendations For SAP UI5 version before 1.38.49, update to version 1.38.49 or later. For SAP UI5 version before 1.52.49, update to version 1.52.49 or later. For SAP UI5 version before 1.60.34, update to version 1.60.34 or later. For SAP UI5 version before 1.71.31, update to version 1.71.31 or later. For SAP UI5 version before 1.78.18, update to version 1.78.18 or later. For SAP UI5 version before 1.84.5, update to version 1.84.5 or later. For SAP UI5 version before 1.85.4, update to version 1.85.4 or later. For SAP UI5 version before 1.86.1, update to version 1.86.1 or later.