CVE-2025-42934
CRLF Injection vulnerability in SAP S/4HANA (Supplier invoice)
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
CRLF Injection vulnerability in SAP S/4HANA (Supplier invoice)
SAP S/4HANA Supplier invoice is vulnerable to CRLF Injection. An attacker with user-level privileges can bypass the allowlist and insert untrusted sites into the 'Trusted Sites' configuration by injecting line feed (LF) characters into application inputs. This vulnerability has a low impact on the application's integrity and no impact on confidentiality or availability.
Reserved 2025-04-16 | Published 2025-08-12 | Updated 2025-08-12 | Assigner sapCWE-113: Improper Neutralization of CRLF Sequences in HTTP Headers
Support options
