Skip to content
OpenAdvisories
Unscored CVE-2018-2474 EUVD-2018-14329GHSA-6mvm-9rrh-j4gc

SAP Fiori 1.0 for SAP ERP HCM (Approve Leave Request, version 2) application allows an attacker to trick an authenticated user to send unin…

Published Oct 9, 2018 · Updated Aug 5, 2024 · Assigned by sap

Vendor: SAP Product: SAP Fiori 1.0 for SAP ERP HCM (Approve Leave Request, version 2)

Description

SAP Fiori 1.0 for SAP ERP HCM (Approve Leave Request, version 2) application allows an attacker to trick an authenticated user to send unintended request to the web server. This vulnerability is due to insufficient CSRF protection.

Affected products

VendorProductAffectedFixed
SAP SAP Fiori 1.0 for SAP ERP HCM (Approve Leave Request, version 2) 1.0 —

References