SAP Commerce Cloud, versions - 1808, 1811, 1905, 2005, 2011, allows an authenticated attacker to include invalidated data in the HTTP response Content Type header, due to improper input validation, and sent to a Web user. A successful exploitation of this vulnerability may lead to advanced attacks, including cross-site scripting and page hijacking.
Metrics
Affected Vendors & Products
References
History
No history.

Status: PUBLISHED
Assigner: sap
Published: 2021-01-12T14:42:03
Updated: 2024-08-03T18:16:22.329Z
Reserved: 2020-12-30T00:00:00
Link: CVE-2021-21445

No data.

Status : Modified
Published: 2021-01-12T15:15:14.360
Modified: 2024-11-21T05:48:23.317
Link: CVE-2021-21445

No data.