SAP Companion Vulnerable to XSS Attack

CVE-2024-22129

Summary

The vulnerability in SAP Companion, specifically in versions prior to 3.1.38, involves a URL parameter that may be susceptible to cross-site scripting (XSS) attacks. This flaw allows an attacker to craft a malicious link, which, when clicked by a user, could result in unauthorized access to sensitive information. While the primary concern revolves around the potential for information exposure, it can also lead to minor integrity issues within the web application. Users are encouraged to review the affected versions and take appropriate measures to mitigate the risk.

References