Threats tagged 'ghsa-89rq-v3p4-r9vp'

An internal ABAP HTTP component in SAP NetWeaver and ABAP Platform (Application Server ABAP) has a Server-Side Request Forgery (SSRF) vulnerability due to insecure default settings. An authenticated attacker with low privileges could trick a victim into interacting with a malicious server, enabling the attacker to access sensitive information belonging to the victim and modify limited non-sensitive information. The vulnerability impacts confidentiality highly and integrity to a lesser extent, with no impact on availability.