SAP Fiori for SAP S/4HANA, versions - 100, 200, 300, 400, allows an attacker to redirect users to a malicious site due to insufficient URL validation, leading to URL Redirection.
References
Link | Resource |
---|---|
https://launchpad.support.sap.com/#/notes/2911687 | Permissions Required Vendor Advisory |
https://launchpad.support.sap.com/#/notes/2911704 | Permissions Required |
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=547426775 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2020-06-10 13:15
Updated : 2024-02-04 21:00
NVD link : CVE-2020-6266
Mitre link : CVE-2020-6266
CVE.ORG link : CVE-2020-6266
JSON object : View
Products Affected
sap
- fiori
CWE
CWE-601
URL Redirection to Untrusted Site ('Open Redirect')