CVE-2023-33984

Summary

CVE-2023-33984 is a vulnerability affecting SAP NetWeaver (Design Time Repository) version 7.50. An attacker, who has already gained authorized access, can exploit this issue by sending a link to a victim containing a file with a malicious content. The repository returns an unfavorable content type for some versioned files, making it possible for the attacker to bypass security measures. This vulnerability increases the risk of Cross-Site Scripting attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.