CVE-2023-29112
published 2023-04-11CVE-2023-29112: The SAP Application Interface (Message Monitoring) - versions 600, 700, allows an authorized attacker to input links or headings with custom CSS classes into a…
medium5.4CVSS 3.1
AVNACLPRLUIRSCCLILAN
The SAP Application Interface (Message Monitoring) - versions 600, 700, allows an authorized attacker to input links or headings with custom CSS classes into a comment. The comment will render links and custom CSS classes as HTML objects. After successful exploitations, an attacker can cause limited impact on the confidentiality and integrity of the application.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| sap | application_interface | — | — |
| sap | application_interface | — | — |
| sap | application_interface_framework | — | — |
| sap | application_interface_framework | — | — |