Link Redirection Vulnerability in SAP NetWeaver Application Server for ABAP

CVE-2023-23853

What is CVE-2023-23853?

An unauthenticated attacker can exploit a vulnerability in the SAP NetWeaver Application Server for ABAP, allowing the creation of a malicious link. If clicked by an unsuspecting user, this link redirects them to a harmful site, enabling the attacker to potentially read or alter sensitive information. This redirection could also expose users to phishing attempts, posing significant risks to both user security and data integrity.

References