Miembros de
Boletines de Vulnerabilidades |
CVE-2025-24875 |
|
| Software afectado | SAP |
| SAP Commerce, by default, sets certain cookies with the SameSite attribute configured to None (SameSite=None). This includes authentication cookies utilized in SAP Commerce Backoffice. Applying this setting reduces defense in depth against CSRF and may lead to future compatibility issues. | |
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2025-24875 | |
