Lucene search
PRIOn knowledge basePRION:CVE-2023-35870HistoryJul 11, 2023 - 3:15 a.m.
Cross site request forgery (csrf)
2023-07-1103:15:00
PRIOn knowledge base
www.prio-n.com
10
cross site request forgery
sap s/4hana
journal entry template
csrf
vulnerability
s4core 104-107
confidentiality
integrity
resource
deletion
When creating a journal entry template in SAP S/4HANA (Manage Journal Entry Template) - versions S4CORE 104, 105, 106, 107, an attacker could intercept the save request and change the template, leading to an impact on confidentiality and integrity of the resource. Furthermore, a standard template could be deleted, hence making the resource temporarily unavailable.
