CVE-2023-30743: Improper Neutralization of Input in SAPUI5
Due to improper neutralization of input in SAPUI5 - versions SAPUI 750, SAPUI 754, SAPUI 755, SAPUI 756, SAPUI 757, UI700 200, sap.m.FormattedText SAPUI5 control allows injection of untrusted CSS. This blocks user’s interaction with the application. Further, in the absence of URL validation by the application, the vulnerability could lead to the attacker reading or modifying user’s information through phishing attack.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-30743?
CVE-2023-30743 is categorized as a high severity vulnerability due to its potential for CSS injection.
How do I fix CVE-2023-30743?
To mitigate CVE-2023-30743, it is recommended to upgrade SAPUI5 to a version that has patched the vulnerability.
What versions of SAPUI5 are affected by CVE-2023-30743?
CVE-2023-30743 affects SAPUI5 versions 700, 750, 754, 755, 756, and 757.
What impact does CVE-2023-30743 have on users?
CVE-2023-30743 can block users' interactions with the application due to improper input handling.
Is CVE-2023-30743 related to any specific SAP component?
Yes, CVE-2023-30743 is specifically associated with the sap.m.FormattedText control in SAPUI5.