A vulnerability was found in SAS Integration Technologies up to 9.4_M8 and classified as problematic. Affected by this issue is some unknown functionality of the file /SASStoredProcess/do of the component URL Handler. The manipulation of the argument _program leads to cross site scripting.
This vulnerability is handled as CVE-2023-4932. The attack may be launched remotely. There is no exploit available.
Intelligence View
⚡ tsecurity.de Intelligence
CVE-2023-4932 | SAS Integration Technologies up to 9.4_M8 URL /SASStoredProcess/do _program cross site scripting
A vulnerability was found in SAS Integration Technologies up to 9.4_M8 and classified as problematic. Affected by this issue is some unknown functionality of the file /SASStoredProcess/do of the component URL Handler. The manipulation of…
Reagiere als Erste:r — dein Feedback zählt!
SOCIAL SHARE CARD GENERATOR