Threats tagged 'ghsa-hr42-755f-x7cv'

SAP NetWeaver Application Server Java (Web Dynpro Java) insufficiently validates certain request parameters used for styling resources. An unauthenticated attacker can craft a malicious link that, when clicked by an authenticated user, causes the victim's browser to load attacker-controlled styling content within the trusted application context. This can lead to UI redressing for phishing and limited exfiltration of web page content. There is no impact on availability.