CVE-2023-29109: Improper Neutralization of Formula Elements in a CSV File

The SAP Application Interface Framework Message Dashboard - versions AIF 703, AIFX 702, S4CORE 101, SAPBASIS 755, 756, SAPABA 75C, 75D, 75E, application allows an Excel formula injection. An authorized attacker can inject arbitrary Excel formulas into fields like the Tooltip of the Custom Hints...

PT-2023-22157

Name of the Vulnerable Software and Affected Versions SAP Application Interface Framework Message Dashboard - versions AIF 703, AIFX 702, S4CORE 101, SAP BASIS 755, 756, SAP ABA 75C, 75D, 75E Description The application allows an Excel formula injection, enabling an authorized attacker to inject...