SAP BSP Applications Unvalidated URL Parameter Vulnerability Leading to Open Redirect

A vulnerability exists in SAP BSP applications that allows an unauthenticated user to manipulate URL parameters. These parameters are not properly validated, which could lead to unvalidated redirection to attacker-controlled websites. This issue poses a low risk to the confidentiality and integrity of the application, with no impact on availability.

Impact

Exploitation of this vulnerability could result in an unvalidated open redirect, allowing users to be redirected to malicious websites.

Remediation

Users are advised to consult the SAP Security Notes for guidance on addressing this vulnerability. SAP Security Notes can be accessed through the SAP for Me platform.