Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-w8gf-92gc-cx36

Опубликовано: 13 янв. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 4.7

Описание

Due to an Open Redirect Vulnerability in SAP Supplier Relationship Management (SICF Handler in SRM Catalog), an unauthenticated attacker could craft a malicious URL that, if accessed by a victim, redirects them to an attacker-controlled site.This causes low impact on integrity of the application. Confidentiality and availability are not impacted.

Due to an Open Redirect Vulnerability in SAP Supplier Relationship Management (SICF Handler in SRM Catalog), an unauthenticated attacker could craft a malicious URL that, if accessed by a victim, redirects them to an attacker-controlled site.This causes low impact on integrity of the application. Confidentiality and availability are not impacted.

EPSS

Процентиль: 16%
0.00053
Низкий

4.7 Medium

CVSS3

Дефекты

CWE-601

Связанные уязвимости

CVSS3: 4.7
nvd
23 дня назад

Due to an Open Redirect Vulnerability in SAP Supplier Relationship Management (SICF Handler in SRM Catalog), an unauthenticated attacker could craft a malicious URL that, if accessed by a victim, redirects them to an attacker-controlled site.This causes low impact on integrity of the application. Confidentiality and availability are not impacted.

CVSS3: 4.7
fstec
24 дня назад

Уязвимость приложения для автоматизации закупки услуг SAP Supplier Relationship Management, связанная с переадресацией URL на ненадежный сайт, позволяющая нарушителю перенаправить пользователя на произвольный URL-адрес

EPSS

Процентиль: 16%
0.00053
Низкий

4.7 Medium

CVSS3

Дефекты

CWE-601