Reflected Cross-Site Scripting Vulnerability in SAP Fiori Launchpad

CVE-2020-26825

What is CVE-2020-26825?

The vulnerability in SAP Fiori Launchpad allows attackers to exploit the News tile Application. By manipulating user-controlled inputs, an attacker can send malicious code, which may impact a victim's web browser by allowing the attacker to read, modify, and misuse information stored within it. Although it does not have a significant impact on the victim's browsing experience, this XSS vulnerability poses a risk of data theft or manipulation, highlighting the importance of implementing proper input encoding safeguards.

References