CVE-2023-30743 - Vulnerability Details - OpenCVE

Due to improper neutralization of input in SAPUI5 - versions SAP_UI 750, SAP_UI 754, SAP_UI 755, SAP_UI 756, SAP_UI 757, UI_700 200, sap.m.FormattedText SAPUI5 control allows injection of untrusted CSS. This blocks user’s interaction with the application. Further, in the absence of URL validation by the application, the vulnerability could lead to the attacker reading or modifying user’s information through phishing attack.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Changed

Confidentiality Impact Low

Integrity Impact Low

Availability Impact Low

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Sap	Sapui5

Configuration 1 [-]

OR	cpe:2.3:a:sap:sapui5:700:::::::*
	cpe:2.3:a:sap:sapui5:750:::::::*
	cpe:2.3:a:sap:sapui5:754:::::::*
	cpe:2.3:a:sap:sapui5:755:::::::*
	cpe:2.3:a:sap:sapui5:756:::::::*
	cpe:2.3:a:sap:sapui5:757:::::::*

No data.

References

Link	Providers
https://launchpad.support.sap.com/#/notes/3326210
https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html

History

No history.

MITRE

Status: PUBLISHED

Assigner: sap

Published: 2023-05-09T01:35:47.761Z

Updated: 2024-08-02T14:37:15.433Z

Reserved: 2023-04-14T06:01:02.875Z

Link: CVE-2023-30743

Vulnrichment

No data.

NVD

Status : Modified

Published: 2023-05-09T02:15:12.397

Modified: 2024-11-21T08:00:48.983

Link: CVE-2023-30743

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-30743", "assignerOrgId": "e4686d1a-f260-4930-ac4c-2f5c992778dd", "state": "PUBLISHED", "assignerShortName": "sap", "dateReserved": "2023-04-14T06:01:02.875Z", "datePublished": "2023-05-09T01:35:47.761Z", "dateUpdated": "2024-08-02T14:37:15.433Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "SAPUI5", "vendor": "SAP_SE", "versions": [{"status": "affected", "version": "SAP_UI 750"}, {"status": "affected", "version": "SAP_UI 754"}, {"status": "affected", "version": "SAP_UI 755"}, {"status": "affected", "version": "SAP_UI 756"}, {"status": "affected", "version": "SAP_UI 757"}, {"status": "affected", "version": "UI_700 200"}]}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<p>Due to improper neutralization of input in SAPUI5 - versions SAP_UI 750, SAP_UI 754, SAP_UI 755, SAP_UI 756, SAP_UI 757, UI_700 200, sap.m.FormattedText SAPUI5 control allows injection of untrusted CSS. This blocks user\u2019s interaction with the application. Further, in the absence of URL validation by the application, the vulnerability could lead to the attacker reading or modifying user\u2019s information through phishing attack.</p>"}], "value": "Due to improper neutralization of input in SAPUI5 - versions SAP_UI 750, SAP_UI 754, SAP_UI 755, SAP_UI 756, SAP_UI 757, UI_700 200, sap.m.FormattedText SAPUI5 control allows injection of untrusted CSS. This blocks user\u2019s interaction with the application. Further, in the absence of URL validation by the application, the vulnerability could lead to the attacker reading or modifying user\u2019s information through phishing attack.\n\n"}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-79", "description": "CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", "lang": "eng", "type": "CWE"}]}], "providerMetadata": {"orgId": "e4686d1a-f260-4930-ac4c-2f5c992778dd", "shortName": "sap", "dateUpdated": "2023-05-09T01:35:47.761Z"}, "references": [{"url": "https://launchpad.support.sap.com/#/notes/3326210"}, {"url": "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html"}], "source": {"discovery": "UNKNOWN"}, "title": "Improper Neutralization of Input in SAPUI5", "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T14:37:15.433Z"}, "title": "CVE Program Container", "references": [{"url": "https://launchpad.support.sap.com/#/notes/3326210", "tags": ["x_transferred"]}, {"url": "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html", "tags": ["x_transferred"]}]}]}}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:sap:sapui5:700:*:*:*:*:*:*:*", "matchCriteriaId": "8FA2988A-2A15-4BC8-9809-C15254D96199", "vulnerable": true}, {"criteria": "cpe:2.3:a:sap:sapui5:750:*:*:*:*:*:*:*", "matchCriteriaId": "EC7D782B-47B8-4B96-9850-EE8F6EAC2026", "vulnerable": true}, {"criteria": "cpe:2.3:a:sap:sapui5:754:*:*:*:*:*:*:*", "matchCriteriaId": "DBB3E2E8-0E41-4931-A7D5-7CCC0DD0D55A", "vulnerable": true}, {"criteria": "cpe:2.3:a:sap:sapui5:755:*:*:*:*:*:*:*", "matchCriteriaId": "08696DC3-DCFE-4894-86FB-18B963F8A331", "vulnerable": true}, {"criteria": "cpe:2.3:a:sap:sapui5:756:*:*:*:*:*:*:*", "matchCriteriaId": "36DEB649-1391-40FC-BF9C-11E820DA1E0A", "vulnerable": true}, {"criteria": "cpe:2.3:a:sap:sapui5:757:*:*:*:*:*:*:*", "matchCriteriaId": "F0D0AC05-A19D-48DF-9E2E-875A487C14E0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Due to improper neutralization of input in SAPUI5 - versions SAP_UI 750, SAP_UI 754, SAP_UI 755, SAP_UI 756, SAP_UI 757, UI_700 200, sap.m.FormattedText SAPUI5 control allows injection of untrusted CSS. This blocks user\u2019s interaction with the application. Further, in the absence of URL validation by the application, the vulnerability could lead to the attacker reading or modifying user\u2019s information through phishing attack.\n\n"}], "id": "CVE-2023-30743", "lastModified": "2024-11-21T08:00:48.983", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 3.7, "source": "cna@sap.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 2.7, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2023-05-09T02:15:12.397", "references": [{"source": "cna@sap.com", "tags": ["Permissions Required", "Vendor Advisory"], "url": "https://launchpad.support.sap.com/#/notes/3326210"}, {"source": "cna@sap.com", "tags": ["Vendor Advisory"], "url": "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Permissions Required", "Vendor Advisory"], "url": "https://launchpad.support.sap.com/#/notes/3326210"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html"}], "sourceIdentifier": "cna@sap.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-79"}], "source": "cna@sap.com", "type": "Secondary"}]}