High Privilege Attacker Can Load Exploitable Payload for Unauthorized Access

CVE-2024-30215

What is CVE-2024-30215?

The vulnerability in the Resource Settings page of SAP applications poses a risk that allows an attacker with high privileges to load malicious payloads, which are then stored and reflected back to users accessing the page. While the attacker can exploit this vulnerability to gain access to some information, they do not have direct control over the specifics of the data obtained or the extent of the damage inflicted. This limitation underscores the need for users of affected SAP products to take proactive measures to secure their systems and mitigate potential risks.

References