CVE:CVE-2023-29110
CNNVD:CNNVD-202304-702
SAP Application Interface Framework（SAP AIF）是德国思爱普（SAP）公司的一个应用程序接口框架。
SAP Application Interface Framework 存在安全漏洞，该漏洞源于应用程序允许使用 HTML 标记，攻击者利用该漏洞可以使用一些基本的 HTML 代码（例如 heading、basic formatting、 lists）注入外部域的图像中。
solution:Upgrade sap abap_platform to a higher version than 75c,75d,75e,and avoid the version 75c,75d,75e; Upgrade sap application_interface_framework to a higher version than aif_703,aifx_702,and avoid the version aif_703,aifx_702; Upgrade sap basis to a higher version than 755,756,and avoid the version 755,756; Upgrade sap s4core to a higher version than 100,101,and avoid the version 100,101