cnvd - cnvd-2024-10205

cnvd-2024-10205

Vulnerability from cnvd

Title: SAP Application Interface Framework跨站脚本漏洞

Description:

SAP Application Interface Framework（SAP AIF）是德国思爱普（SAP）公司的一个应用程序接口框架。

SAP Application Interface Framework存在安全漏洞，该漏洞源于应用程序允许使用HTML标记，攻击者可利用该漏洞使用一些基本的HTML代码（例如 heading、basic formatting、 lists）注入外部域的图像中。

Severity: 中

Patch Name: SAP Application Interface Framework跨站脚本漏洞的补丁

Patch Description:

SAP Application Interface Framework（SAP AIF）是德国思爱普（SAP）公司的一个应用程序接口框架。

SAP Application Interface Framework存在安全漏洞，该漏洞源于应用程序允许使用HTML标记，攻击者可利用该漏洞使用一些基本的HTML代码（例如 heading、basic formatting、 lists）注入外部域的图像中。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description:

厂商已发布了漏洞修复程序，请及时关注更新： https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html

Reference: https://launchpad.support.sap.com/#/notes/3113349

Impacted products

Name
['SAP SAP Application Interface Framework 756', 'SAP SAP Application Interface Framework AIF 703', 'SAP SAP Application Interface Framework AIFX 702', 'SAP SAP Application Interface Framework S4CORE 100', 'SAP SAP Application Interface Framework 101', 'SAP SAP Application Interface Framework SAP_BASIS 755', 'SAP SAP Application Interface Framework SAP_ABA 75C', 'SAP SAP Application Interface Framework 75D', 'SAP SAP Application Interface Framework 75E']

Name

['SAP SAP Application Interface Framework 756', 'SAP SAP Application Interface Framework AIF 703', 'SAP SAP Application Interface Framework AIFX 702', 'SAP SAP Application Interface Framework S4CORE 100', 'SAP SAP Application Interface Framework 101', 'SAP SAP Application Interface Framework SAP_BASIS 755', 'SAP SAP Application Interface Framework SAP_ABA 75C', 'SAP SAP Application Interface Framework 75D', 'SAP SAP Application Interface Framework 75E']

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2023-29110",
      "cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2023-29110"
    }
  },
  "description": "SAP Application Interface Framework\uff08SAP AIF\uff09\u662f\u5fb7\u56fd\u601d\u7231\u666e\uff08SAP\uff09\u516c\u53f8\u7684\u4e00\u4e2a\u5e94\u7528\u7a0b\u5e8f\u63a5\u53e3\u6846\u67b6\u3002\n\nSAP Application Interface Framework\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u5e94\u7528\u7a0b\u5e8f\u5141\u8bb8\u4f7f\u7528HTML\u6807\u8bb0\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u4f7f\u7528\u4e00\u4e9b\u57fa\u672c\u7684HTML\u4ee3\u7801\uff08\u4f8b\u5982 heading\u3001basic formatting\u3001 lists\uff09\u6ce8\u5165\u5916\u90e8\u57df\u7684\u56fe\u50cf\u4e2d\u3002",
  "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u4e86\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2024-10205",
  "openTime": "2024-02-26",
  "patchDescription": "SAP Application Interface Framework\uff08SAP AIF\uff09\u662f\u5fb7\u56fd\u601d\u7231\u666e\uff08SAP\uff09\u516c\u53f8\u7684\u4e00\u4e2a\u5e94\u7528\u7a0b\u5e8f\u63a5\u53e3\u6846\u67b6\u3002\r\n\r\nSAP Application Interface Framework\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u5e94\u7528\u7a0b\u5e8f\u5141\u8bb8\u4f7f\u7528HTML\u6807\u8bb0\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u4f7f\u7528\u4e00\u4e9b\u57fa\u672c\u7684HTML\u4ee3\u7801\uff08\u4f8b\u5982 heading\u3001basic formatting\u3001 lists\uff09\u6ce8\u5165\u5916\u90e8\u57df\u7684\u56fe\u50cf\u4e2d\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "SAP Application Interface Framework\u8de8\u7ad9\u811a\u672c\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "SAP SAP Application Interface Framework 756",
      "SAP SAP Application Interface Framework AIF 703",
      "SAP SAP Application Interface Framework AIFX 702",
      "SAP SAP Application Interface Framework S4CORE 100",
      "SAP SAP Application Interface Framework 101",
      "SAP SAP Application Interface Framework SAP_BASIS 755",
      "SAP SAP Application Interface Framework SAP_ABA 75C",
      "SAP SAP Application Interface Framework 75D",
      "SAP SAP Application Interface Framework 75E"
    ]
  },
  "referenceLink": "https://launchpad.support.sap.com/#/notes/3113349",
  "serverity": "\u4e2d",
  "submitTime": "2023-04-18",
  "title": "SAP Application Interface Framework\u8de8\u7ad9\u811a\u672c\u6f0f\u6d1e"
}

CVE-2023-29110 (GCVE-0-2023-29110)

Vulnerability from cvelistv5

Published

2023-04-11 03:00

Modified

2025-02-07 17:13

Severity ?

3.7 (Low) - CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N

CWE

CWE-80 - Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

Summary

The SAP Application Interface (Message Dashboard) - versions AIF 703, AIFX 702, S4CORE 100, 101, SAP_BASIS 755, 756, SAP_ABA 75C, 75D, 75E, application allows the usage HTML tags. An authorized attacker can use some of the basic HTML codes such as heading, basic formatting and lists, then an attacker can inject images from the foreign domains. After successful exploitations, an attacker can cause limited impact on the confidentiality and integrity of the application.

References

▼	URL	Tags
	https://launchpad.support.sap.com/#/notes/3113349
	https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html

Impacted products

	Vendor	Product	Version
	SAP	Application Interface Framework (Message Dashboard)	Version: AIF 703 Version: AIFX 702 Version: S4CORE 100 Version: S4CORE 101 Version: SAP_BASIS 755 Version: SAP_BASIS 756 Version: SAP_ABA 75C Version: SAP_ABA 75D Version: SAP_ABA 75E

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T14:00:15.878Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://launchpad.support.sap.com/#/notes/3113349"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-29110",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-02-07T17:13:12.939238Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-02-07T17:13:23.603Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Application Interface Framework (Message Dashboard)",
          "vendor": "SAP",
          "versions": [
            {
              "status": "affected",
              "version": "AIF 703"
            },
            {
              "status": "affected",
              "version": "AIFX 702"
            },
            {
              "status": "affected",
              "version": "S4CORE 100"
            },
            {
              "status": "affected",
              "version": "S4CORE 101"
            },
            {
              "status": "affected",
              "version": "SAP_BASIS 755"
            },
            {
              "status": "affected",
              "version": "SAP_BASIS 756"
            },
            {
              "status": "affected",
              "version": "SAP_ABA 75C"
            },
            {
              "status": "affected",
              "version": "SAP_ABA 75D"
            },
            {
              "status": "affected",
              "version": "SAP_ABA 75E"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eThe SAP Application Interface (Message Dashboard) - versions AIF 703, AIFX 702, S4CORE 100, 101, SAP_BASIS 755, 756, SAP_ABA 75C, 75D, 75E, application allows the usage HTML tags. An authorized attacker can use some of the basic HTML codes such as heading, basic formatting and lists, then an attacker can inject images from the foreign domains. After successful exploitations, an attacker can cause limited impact on the confidentiality and integrity of the application.\u003c/p\u003e"
            }
          ],
          "value": "The SAP Application Interface (Message Dashboard) - versions AIF 703, AIFX 702, S4CORE 100, 101, SAP_BASIS 755, 756, SAP_ABA 75C, 75D, 75E, application allows the usage HTML tags. An authorized attacker can use some of the basic HTML codes such as heading, basic formatting and lists, then an attacker can inject images from the foreign domains. After successful exploitations, an attacker can cause limited impact on the confidentiality and integrity of the application.\n\n"
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 3.7,
            "baseSeverity": "LOW",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-80",
              "description": "CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)",
              "lang": "eng",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-04-11T20:17:48.094Z",
        "orgId": "e4686d1a-f260-4930-ac4c-2f5c992778dd",
        "shortName": "sap"
      },
      "references": [
        {
          "url": "https://launchpad.support.sap.com/#/notes/3113349"
        },
        {
          "url": "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html"
        }
      ],
      "source": {
        "discovery": "UNKNOWN"
      },
      "title": "Code Injection vulnerability in SAP Application Interface Framework (Message Dashboard)",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "e4686d1a-f260-4930-ac4c-2f5c992778dd",
    "assignerShortName": "sap",
    "cveId": "CVE-2023-29110",
    "datePublished": "2023-04-11T03:00:17.210Z",
    "dateReserved": "2023-03-31T10:01:53.360Z",
    "dateUpdated": "2025-02-07T17:13:23.603Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted