2025-08-12 02:04:50
sap
PUBLISHED
SAP S/4HANA Supplier invoice is vulnerable to CRLF Injection. An attacker with user-level privileges can bypass the allowlist and insert untrusted sites into the Trusted Sites configuration by injecting line feed (LF) characters into application inputs. This vulnerability has a low impact on the applications integrity and no impact on confidentiality or availability.