CVE-2024-30214: Cross-Site Scripting (XSS) vulnerability in SAP Business Connector
The application allows a high privilege attacker to append a malicious GET query parameter to Service invocations, which are reflected in the server response. Under certain circumstances, if the parameter contains a JavaScript, the script could be processed on client side.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-30214?
CVE-2024-30214 is classified as a high severity vulnerability due to its potential for exploitation by high privilege attackers.
How do I fix CVE-2024-30214?
To mitigate CVE-2024-30214, it's recommended to validate and sanitize input parameters in service invocations to prevent malicious scripts from being executed.
What software is affected by CVE-2024-30214?
CVE-2024-30214 specifically affects the SAP Business Connector.
What type of attack is facilitated by CVE-2024-30214?
CVE-2024-30214 allows attackers to perform reflected cross-site scripting attacks via malicious GET query parameters.
Can CVE-2024-30214 affect client-side security?
Yes, if exploited, CVE-2024-30214 can result in client-side JavaScript execution, compromising client-side security.