Files
CVEs-PoC/2020/CVE-2020-6210.md
T
2024-06-18 02:51:15 +02:00

801 B

CVE-2020-6210

Description

SAP Fiori Launchpad, versions- 753, 754, does not sufficiently encode user-controlled inputs, and hence allowing the attacker to inject the meta tag into the launchpad html using the vulnerable parameter, leading to reflected Cross-Site Scripting (XSS) vulnerability.

POC

Reference

Github

No PoCs found on GitHub currently.