PT-2021-20244
CVE-2021-33666
·
Published
2021-06-09
·
Updated
2021-06-21
Description by
CVSS 3.1
6.1
MediumMetricsAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions:
SAP Commerce Cloud version 100
Description:
The issue concerns MIME sniffing, which under certain circumstances could facilitate an XSS attack or malware proliferation when SAP Commerce Cloud hosts a JavaScript storefront.
Recommendations:
For SAP Commerce Cloud version 100, consider implementing proper MIME type handling to prevent MIME sniffing attacks, which could help mitigate the risk of XSS or malware proliferation.
Found an issue in the description? Have something to add? Feel free to write us 👾