CVE-2023-42479

An unauthenticated attacker can embed a hidden access to a Biller Direct URL in a frame which, when loaded by the user, will submit a cross-site scripting request to the Biller Direct system. This can result in the disclosure or modification of non-sensitive information...

CVE-2023-42479 Cross-Site Scripting (XSS) vulnerability in SAP Biller Direct

An unauthenticated attacker can embed a hidden access to a Biller Direct URL in a frame which, when loaded by the user, will submit a cross-site scripting request to the Biller Direct system. This can result in the disclosure or modification of non-sensitive information...

CVE-2023-42479

SAP Biller Direct is affected by CVE-2023-42479, an unauthenticated XSS vulnerability where an attacker can embed a hidden Biller Direct URL in a frame that, when loaded by a user, triggers a cross-site scripting request. This can lead to disclosure or modification of non-sensitive information. T...