Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2022-24399

The SAP Focused Run (Real User Monitoring) - versions 200, 300, REST service does not sufficiently sanitize the input name of the file using multipart/form-data, resulting in Cross

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
sap

Description

The SAP Focused Run (Real User Monitoring) - versions 200, 300, REST service does not sufficiently sanitize the input name of the file using multipart/form-data, resulting in Cross-Site Scripting (XSS) vulnerability.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP SE SAP Focused Run (Real User Monitoring)

  • < 200affected
  • < 300affected

References