Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qm7h-4cgg-4m78

Опубликовано: 09 нояб. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.1

Описание

SAP Biller Direct allows an unauthenticated attacker to craft a legitimate looking URL. When clicked by an unsuspecting victim, it will use an unsensitized parameter to redirect the victim to a malicious site of the attacker's choosing which can result in disclosure or modification of the victim's information.

SAP Biller Direct allows an unauthenticated attacker to craft a legitimate looking URL. When clicked by an unsuspecting victim, it will use an unsensitized parameter to redirect the victim to a malicious site of the attacker's choosing which can result in disclosure or modification of the victim's information.

EPSS

Процентиль: 46%
0.00231
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-601

Связанные уязвимости

CVSS3: 6.1
nvd
около 3 лет назад

SAP Biller Direct allows an unauthenticated attacker to craft a legitimate looking URL. When clicked by an unsuspecting victim, it will use an unsensitized parameter to redirect the victim to a malicious site of the attacker's choosing which can result in disclosure or modification of the victim's information.

EPSS

Процентиль: 46%
0.00231
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-601