SAP Gateway Error Message Injection Vulnerability Allowing Disclosure of Request Artefacts

A vulnerability in SAP Gateway allows for the injection of content into error messages. This could lead to the unintentional disclosure of request artefacts, such as regular expression patterns, and expose the underlying URI parsing logic. While this vulnerability has a low impact on confidentiality, it does not affect integrity or availability.

Impact

Exploitation of this vulnerability could result in the injection of content into error messages, potentially disclosing sensitive request artefacts and URI parsing details.

Remediation

Users are advised to consult the SAP Security Notes for guidance on addressing this vulnerability. SAP Security Notes can be accessed through the SAP for Me platform.