Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-wwvh-435q-gw8h

Опубликовано: 14 сент. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 4.3

Описание

The Create Single Payment application of SAP S/4HANA - versions 100, 101, 102, 103, 104, 105, 106, 107, 108, allows an attacker to upload the XML file as an attachment. When clicked on the XML file in the attachment section, the file gets opened in the browser to cause the entity loops to slow down the browser.

The Create Single Payment application of SAP S/4HANA - versions 100, 101, 102, 103, 104, 105, 106, 107, 108, allows an attacker to upload the XML file as an attachment. When clicked on the XML file in the attachment section, the file gets opened in the browser to cause the entity loops to slow down the browser.

EPSS

Процентиль: 30%
0.00109
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-611

Связанные уязвимости

CVSS3: 3.5
nvd
больше 2 лет назад

The Create Single Payment application of SAP S/4HANA - versions 100, 101, 102, 103, 104, 105, 106, 107, 108, allows an attacker to upload the XML file as an attachment. When clicked on the XML file in the attachment section, the file gets opened in the browser to cause the entity loops to slow down the browser.

EPSS

Процентиль: 30%
0.00109
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-611