Miembros de
Boletines de Vulnerabilidades |
CVE-2025-31328 |
|
| Software afectado | SAP |
| SAP Learning Solution is vulnerable to Cross-Site Request Forgery (CSRF), allowing an attacker to trick authenticated user into sending unintended requests to the server. GET-based OData function is named in a way that it violates the expected behaviour. This issue could impact both the confidentiality and integrity of the application without affecting the availability. | |
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2025-31328 | |
