CyberRota Analysis
AI-GeneratedThe vulnerability allows an attacker to bypass the sap-allowed-theme-origins allowlist, enabling the injection of arbitrary CSS into a web page through manipulated input, such as URL parameters or user settings. This exploitation can lead to UI redressing, clickjacking, phishing overlays, visual defacement, and limited data exfiltration. Organizations utilizing affected products should prioritize remediation to protect against potential attacks that exploit this weakness.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
setThemeRoot() failed to enforce the sap-allowed-theme-origins allowlist. An attacker-controlled absolute cross-origin URL could be stored and used directly to construct a <link rel=stylesheet> element, even when no <meta name=sap-allowed-theme-origins> tag was present in the document. The same bypass was reachable via the ?sap-themeRoot URL parameter.Exploitation requires attacker-influenced input (e.g., a URL query parameter, tenant configuration, or user-supplied setting) to reach setThemeRoot(). A successful exploit allows an attacker to inject arbitrary CSS into the victim page, enabling:- UI redressing and clickjacking- Phishing overlays- Visual defacement- Limited data exfiltration via CSS attribute selectors targeting predictable DOM content