CVE-2023-40306

SAP S/4HANA Manage Catalog Items and Cross-Catalog searches Fiori apps allow an attacker to redirect users to a malicious site due to insufficient URL validation. As a result, it may have a slight impact on confidentiality and integrity...

CVE-2023-40306

CVE-2023-40306 affects SAP S/4HANA Manage Catalog Items and Cross-Catalog searches in the Fiori apps. The root cause is insufficient URL validation, enabling an open-redirect where an attacker can redirect users to a malicious site. The vulnerability is rated CVSS v3.1 Base Score 6.1 (Medium) wit...