Server-Side Request Forgery in SAP Fiori Launchpad by SAP

CVE-2020-26815

What is CVE-2020-26815?

SAP Fiori Launchpad, specifically within its News tile Application, is susceptible to a Server-Side Request Forgery (SSRF). This vulnerability allows an unauthorized attacker to craft requests targeting internal systems, which are typically shielded behind firewalls, thereby gaining unauthorized access to sensitive or confidential resources. Such exploitation can compromise the security posture of the application, rendering restricted internal resources vulnerable to exposure.

References