CVEvulnerability

CVE-2024-34683

6.5 MEDIUM Published 2024-06-11 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2024-06-11
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
Weaknesses
CWE-434

Description

An authenticated attacker can upload malicious file to SAP Document Builder service. When the victim accesses this file, the attacker is allowed to access, modify, or make the related information unavailable in the victim’s browser.

Affected configurations

• sap document builder 101 • sap document builder 103 • sap document builder 104 • sap document builder 105 • sap document builder 106 • sap document builder 107 • sap document builder 108 • sap document builder 731 • sap document builder 746 • sap document builder 747 • sap document builder 748 • sap document builder s4core 100 • sap document builder s4fnd 102 • sap document builder sap bs fnd 702

Related

Weakness · CWE (1)

  • CWE-434 Unrestricted Upload of File with Dangerous Type weakness

References