GHSA-pgxh-rpr4-8mr8
GitHub Security Advisory
⚠ Unreviewed
MODERATE
Has CVE
Advisory Details
An attacker with basic business user privileges could craft and upload a malicious file to SAP NetWeaver Application Server ABAP, which is then downloaded and viewed by other users resulting in a stored Cross-Site-Scripting attack. This could lead to information disclosure including stealing authentication information and impersonating the affected user.
Related CVEs
Key Information
5.0
/10
Dataset
Last updated: September 9, 2025 6:37 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.