CVE:CVE-2022-41273
CNNVD:CNNVD-202212-2960
SAP Sourcing和SAP Contract Lifecycle Management都是德国思爱普（SAP）公司的产品。SAP Sourcing是一个内部应用程序。为采购流程提供端到端解决方案。SAP Contract Lifecycle Management是一个合同生命周期管理平台。
SAP Sourcing和SAP Contract Lifecycle Management 1100版本存在输入验证错误漏洞，该漏洞源于其对输入消毒不当导致攻击者可以将用户重定向到恶意网站。
solution:Upgrade sap contract_lifecycle_manager to a higher version than 1100,and avoid the version 1100; Upgrade sap sourcing to a higher version than 1100,and avoid the version 1100