admin/cve
1
0
Fork 0
mirror of https://github.com/0xMarcio/cve.git synced 2025-11-28 18:48:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
cve/2021/CVE-2021-40500.md
0xMarcio 48a00929ac Removed duplicates
2024-06-18 02:51:15 +02:00

925 B
Raw Blame History

CVE-2021-40500

Description

SAP BusinessObjects Business Intelligence Platform (Crystal Reports) - versions 420, 430, allows an unauthenticated attacker to exploit missing XML validations at endpoints to read sensitive data. These endpoints are normally exposed over the network and successful exploitation can enable the attacker to retrieve arbitrary files from the server.

POC

Reference

Github

No PoCs found on GitHub currently.