Description (CNA)
The F0743 Create Single Payment application of SAP S/4HANA - versions 100, 101, 102, 103, 104, 105, 106, does not check uploaded or downloaded files. This allows an attacker with basic user rights to run arbitrary script code, resulting in sensitive information being disclosed or modified.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SAP SE / SAP S/4HANA | affected 100; affected 101; affected 102; affected 103; affected 104; affected 105; affected 106 |
CWE
No CWE identifiers supplied.
References
- https://launchpad.support.sap.com/#/notes/3112928
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=596902035
ADP enrichment
No English description supplied.