CVE-2024-33002

Publication date

2024-05-14 03:49:25

Family

sap

State

PUBLISHED

Description

Document Service handler (obsolete) in Data Provisioning Service does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability with low impact on Confidentiality and Integrity of the application.