The vulnerability of the Launchpad component of the SAP Fiori business application development platform lies in the use of web links to an unreliable target object, allowing attackers to execute a Reverse Tabbing attack.

The vulnerability of the Launchpad component of the SAP Fiori business application development platform relates to the use of web links to an unreliable target object with access to window.opener. Exploiting this vulnerability allows a remote attacker to execute a Reverse Tabbing attack...