CVE-2021-33705

CVE-2021-33705

The SAP NetWeaver Portal, versions – 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, component Iviews Editor contains a Server-Side Request Forgery (SSRF) vulnerability which allows an unauthenticated attacker to craft a malicious URL which when clicked by a user can make any type of request (e.g. POST, GET) to any internal or external server. This can result in the accessing or modification of data accessible from the Portal but will not affect its availability.

Source: CVE-2021-33705

답글 남기기

이메일 주소는 공개되지 않습니다. 필수 필드는 *로 표시됩니다