Description (CNA)
SAP Cloud Platform Integration for Data Services, version 1.0, allows user inputs to be reflected as error or warning massages. This could mislead the victim to follow malicious instructions inserted by external attackers, leading to Cross Site Request Forgery.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SAP SE / SAP Cloud Platform Integration for Data Services | affected < 1.0 |
CWE
No CWE identifiers supplied.
References
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=540935305
- https://launchpad.support.sap.com/#/notes/2859004
ADP enrichment
No English description supplied.