CVE-2023-29189

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

SAP CRM (WebClient UI) - versions S4FND 102, 103, 104, 105, 106, 107, WEBCUIF, 700, 701, 731, 730, 746, 747, 748, 800, 801, allows an authenticated attacker to modify HTTP verbs used in requests to the web server. This application is exposed over the network and successful exploitation can lead to exposure of form fields

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Weakness enumeration

CWE-23

Affected software

No affected versions have been published.

Timeline

Published: Apr 11, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-29194.3The Tutor LMS plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.7.4. This is due to missi CVE-2023-291924.3SilverwareGames.io versions before 1.2.19 allow users with access to the game upload panel to edit download links for games uploaded by othe CVE-2023-291937.5SpiceDB is an open source, Google Zanzibar-inspired, database system for creating and managing security-critical application permissions. Th CVE-2023-291942.7Vitess is a database clustering system for horizontal scaling of MySQL. Users can either intentionally or inadvertently create a keyspace co CVE-2023-291954.3Vitess is a database clustering system for horizontal scaling of MySQL through generalized sharding. Prior to version 16.0.2, users can eith CVE-2023-291966.1Discourse is an open source platform for community discussion. This vulnerability is not exploitable on the default install of Discourse. A CVE-2023-291977.5guzzlehttp/psr7 is a PSR-7 HTTP message library implementation in PHP. Affected versions are subject to improper header parsing. An attacker CVE-2023-291988.5Electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Electron apps using `contex CVE-2023-2919910.0There exists a vulnerability in source code transformer (exception sanitization logic) of vm2 for versions up to 3.9.15, allowing attackers CVE-2023-292006.5Contao is an open source content management system. Prior to versions 4.9.40, 4.13.21, and 5.1.4, logged in users can list arbitrary system CVE-2023-292019.0XWiki Commons are technical libraries common to several other top level XWiki projects. The "restricted" mode of the HTML cleaner in XWiki, CVE-2023-292029.0XWiki Commons are technical libraries common to several other top level XWiki projects. The RSS macro that is bundled in XWiki included the