CVE-2019-0281

SAPUI5 and OpenUI5 are affected prior to versions 1.38.39, 1.44.39, 1.52.25, 1.60.6 and 1.63.0, where user-controlled inputs are not sufficiently encoded, resulting in a Cross-Site Scripting (XSS) vulnerability. The root cause is insufficient input encoding. Connected documents confirm the issue ...