CVE-2023-49584

概要

参考情報

• me.sap.com/notes/3406786 · Permissions Required
• sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html · Vendor Advisory

fiori launchpad のその他の脆弱性

• CVE-2022-26101中 6.1Fiori launchpad - versions 754, 755, 756, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulne…
• CVE-2020-6283中 6.1SAP Fiori Launchpad does not sufficiently encode user controlled inputs, and hence allowing the attacker to inject the meta tag into the lau…
• CVE-2020-6210中 6.1SAP Fiori Launchpad, versions- 753, 754, does not sufficiently encode user-controlled inputs, and hence allowing the attacker to inject the …