bugtraq - CVE-2017-9613: Stored Cross-Site Scripting in SAP successfactors

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-Id: <201706150907.v5F97Klp029882@sf01web3.securityfocus.com>
Date: Thu, 15 Jun 2017 09:07:20 GMT
From: dunstan.pinto@...il.com
To: bugtraq@...urityfocus.com
Subject: CVE-2017-9613: Stored Cross-Site Scripting in SAP successfactors

CVE-2017-9613: Stored Cross-Site Scripting in SAP successfactors

Severity: High

Vendor: SAP

Versions Affected: SAP successfactors - Release build b1702p5e.1190658

Description: Stored Cross-site scripting (XSS) vulnerability in SAP Successfactors allows remote authenticated users to inject arbitrary web script or HTML via the file upload functionality.

Resolution: SAP has fixed this in Release build b1705.1234962