In April 2025, security researchers at ReliaQuest identified a series of incidents where threat actors leveraged this flaw to upload and execute webshells in publicly accessible directories, raising concerns of a zero-day remote file inclusion (RFI) vulnerability that had not been previously reported or patched. A wave of targeted cyberattacks has exposed a previously unknown vulnerability in SAP NetWeaver, allowing attackers to deploy malicious JSP webshells and gain unauthorized access to enterprise systems, even those running the latest patches. Threat actors leveraged a Remote File Inclusion (RFI) vulnerability, a class of flaw in which unsanitized user input allows arbitrary files to be uploaded and executed on the server.
This Cyber News was published on cybersecuritynews.com. Publication date: Fri, 25 Apr 2025 05:55:12 +0000