pysec - pysec-2023-172

pysec-2023-172

Vulnerability from pysec

Published

2023-09-12 02:15

Modified

2023-09-29 22:26

Severity ?

4.3 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Details

The Create Single Payment application of SAP S/4HANA - versions 100, 101, 102, 103, 104, 105, 106, 107, 108, allows an attacker to upload the XML file as an attachment. When clicked on the XML file in the attachment section, the file gets opened in the browser to cause the entity loops to slow down the browser.

Impacted products

Name	purl
hana-ml	pkg:pypi/hana-ml

Aliases

CVE-2023-41369

JSON

To clipboard

{
   affected: [
      {
         package: {
            ecosystem: "PyPI",
            name: "hana-ml",
            purl: "pkg:pypi/hana-ml",
         },
         ranges: [
            {
               events: [
                  {
                     introduced: "0",
                  },
               ],
               type: "ECOSYSTEM",
            },
         ],
         versions: [
            "1.0.8.post11",
            "1.0.8.post2",
            "1.0.8.post5",
            "1.0.8.post8",
            "2.10.21091803",
            "2.11.21121103",
            "2.11.22010700",
            "2.11.22020900",
            "2.12.22032503",
            "2.12.22040801",
            "2.12.22042500",
            "2.12.22042800",
            "2.13.22051101",
            "2.13.22060800",
            "2.13.22070101",
            "2.13.22071500",
            "2.13.22072200",
            "2.14.22091801",
            "2.14.22092300",
            "2.14.22101400",
            "2.14.22102800",
            "2.14.22120100",
            "2.14.22120800",
            "2.15.22121601",
            "2.15.22122300",
            "2.15.23011100",
            "2.15.23021701",
            "2.16.23031601",
            "2.16.23032300",
            "2.16.23041300",
            "2.16.23050800",
            "2.16.23051900",
            "2.16.23052600",
            "2.16.23060100",
            "2.17.23062200",
            "2.17.23062800",
            "2.17.23071400",
            "2.17.23072700",
            "2.17.23080800",
            "2.18.23091401",
            "2.5.20062605",
            "2.5.20062608",
            "2.5.20062609",
            "2.6.20101606",
            "2.6.20110600",
            "2.6.20110601",
            "2.6.20120900",
            "2.6.21011300",
            "2.6.21012600",
            "2.8.21042100",
            "2.9.21061902",
            "2.9.21063001",
            "2.9.21070902",
            "2.9.21072600",
            "2.18.23092700",
            "2.18.23092701",
         ],
      },
   ],
   aliases: [
      "CVE-2023-41369",
   ],
   details: "The Create Single Payment application of SAP S/4HANA - versions 100, 101, 102, 103, 104, 105, 106, 107, 108, allows an attacker to upload the XML file as an attachment. When clicked on the XML file in the attachment section, the file gets opened in the browser to cause the entity loops to slow down the browser.\n\n",
   id: "PYSEC-2023-172",
   modified: "2023-09-29T22:26:12.812435Z",
   published: "2023-09-12T02:15:00Z",
   references: [
      {
         type: "ADVISORY",
         url: "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
      },
      {
         type: "WEB",
         url: "https://me.sap.com/notes/3369680",
      },
   ],
   severity: [
      {
         score: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
         type: "CVSS_V3",
      },
   ],
}

cve-2023-41369

Vulnerability from cvelistv5

Published

2023-09-12 01:59

Modified

2024-09-25 15:33

Severity ?

3.5 (Low) - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L

Summary

References

▼	URL	Tags
	https://me.sap.com/notes/3369680
	https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html

Impacted products

	Vendor	Product	Version
	SAP_SE	SAP S/4HANA (Create Single Payment application)	Version: 100 Version: 101 Version: 102 Version: 103 Version: 104 Version: 105 Version: 106 Version: 107 Version: 108

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-02T19:01:34.245Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://me.sap.com/notes/3369680",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
               },
            ],
            title: "CVE Program Container",
         },
         {
            metrics: [
               {
                  other: {
                     content: {
                        id: "CVE-2023-41369",
                        options: [
                           {
                              Exploitation: "none",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "partial",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2024-09-25T15:11:16.316030Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
            ],
            providerMetadata: {
               dateUpdated: "2024-09-25T15:33:02.395Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               defaultStatus: "unaffected",
               product: "SAP S/4HANA (Create Single Payment application)",
               vendor: "SAP_SE",
               versions: [
                  {
                     status: "affected",
                     version: "100",
                  },
                  {
                     status: "affected",
                     version: "101",
                  },
                  {
                     status: "affected",
                     version: "102",
                  },
                  {
                     status: "affected",
                     version: "103",
                  },
                  {
                     status: "affected",
                     version: "104",
                  },
                  {
                     status: "affected",
                     version: "105",
                  },
                  {
                     status: "affected",
                     version: "106",
                  },
                  {
                     status: "affected",
                     version: "107",
                  },
                  {
                     status: "affected",
                     version: "108",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               supportingMedia: [
                  {
                     base64: false,
                     type: "text/html",
                     value: "<p>The Create Single Payment application of SAP S/4HANA - versions 100, 101, 102, 103, 104, 105, 106, 107, 108, allows an attacker to upload the XML file as an attachment. When clicked on the XML file in the attachment section, the file gets opened in the browser to cause the entity loops to slow down the browser.</p>",
                  },
               ],
               value: "The Create Single Payment application of SAP S/4HANA - versions 100, 101, 102, 103, 104, 105, 106, 107, 108, allows an attacker to upload the XML file as an attachment. When clicked on the XML file in the attachment section, the file gets opened in the browser to cause the entity loops to slow down the browser.\n\n",
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "LOW",
                  baseScore: 3.5,
                  baseSeverity: "LOW",
                  confidentialityImpact: "NONE",
                  integrityImpact: "NONE",
                  privilegesRequired: "LOW",
                  scope: "UNCHANGED",
                  userInteraction: "REQUIRED",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L",
                  version: "3.1",
               },
               format: "CVSS",
               scenarios: [
                  {
                     lang: "en",
                     value: "GENERAL",
                  },
               ],
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-611",
                     description: "CWE-611: Improper Restriction of XML External Entity Reference",
                     lang: "eng",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2023-09-12T01:59:03.570Z",
            orgId: "e4686d1a-f260-4930-ac4c-2f5c992778dd",
            shortName: "sap",
         },
         references: [
            {
               url: "https://me.sap.com/notes/3369680",
            },
            {
               url: "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
            },
         ],
         source: {
            discovery: "UNKNOWN",
         },
         title: "External Entity Loop vulnerability in SAP S/4HANA (Create Single Payment application)",
         x_generator: {
            engine: "Vulnogram 0.1.0-dev",
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "e4686d1a-f260-4930-ac4c-2f5c992778dd",
      assignerShortName: "sap",
      cveId: "CVE-2023-41369",
      datePublished: "2023-09-12T01:59:03.570Z",
      dateReserved: "2023-08-29T05:27:56.301Z",
      dateUpdated: "2024-09-25T15:33:02.395Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted