Threats tagged 'ghsa-xj69-7mjj-rqhg'

SAP NetWeaver Knowledge Management (XML Forms) contains a vulnerability where it does not sufficiently restrict the selection of XSL transformations. An authenticated user with access to this functionality could cause unauthorized XSL transformations to be processed, potentially leading to arbitrary code execution. This could impact the confidentiality, integrity, and availability of the application.