cve/2019/CVE-2019-0374.md
2024-06-18 02:51:15 +02:00

872 B

CVE-2019-0374

Description

SAP BusinessObjects Business Intelligence Platform (Web Intelligence HTML interface), before versions 4.2 and 4.3, does not sufficiently encode user-controlled inputs and allows execution of scripts in the chart title resulting in reflected Cross-Site Scripting

POC

Reference

Github

No PoCs found on GitHub currently.