CVE-2022-41207
SAP Biller Direct allows an unauthenticated attacker to craft a legitimate looking URL. When clicked by an unsuspecting victim, it will use an unsensitized parameter to redirect…
Published: 2022-11-08 · CVSS: 6.1 · CVSS 3.0
SAP Biller Direct allows an unauthenticated attacker to craft a legitimate looking URL. When clicked by an unsuspecting victim, it will use an unsensitized parameter to redirect the victim to a malicious site of the attacker's choosing which can result in disclosure or modification of the victim's information.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7