CVE-2020-6215

Description

SAP NetWeaver AS ABAP Business Server Pages Test Application IT00, versions 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754, allows an attacker to redirect users to a malicious site due to insufficient URL validation and steal credentials of the victim, leading to URL Redirection vulnerability.

References

https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=544214202

https://launchpad.support.sap.com/#/notes/2872782

http://seclists.org/fulldisclosure/2023/Oct/13

http://packetstormsecurity.com/files/174985/SAP-Application-Server-ABAP-Open-Redirection.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3