GHSA-5cgp-98vf-r77v
GitHub Security Advisory
⚠ Unreviewed
MODERATE
Has CVE
Advisory Details
In SAP Enable Now - versions WPB_MANAGER 1.0, WPB_MANAGER_CE 10, WPB_MANAGER_HANA 10, ENABLE_NOW_CONSUMP_DEL 1704, the X-Content-Type-Options response header is not implemented, allowing an unauthenticated attacker to trigger MIME type sniffing, which leads to Cross-Site Scripting, which could result in disclosure or modification of information.
Related CVEs
Key Information
5.0
/10
Dataset
Last updated: September 7, 2025 6:30 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.