CVE-2025-31328

The vulnerability is a Cross-Site Request Forgery (CSRF) in SAP Learning Solution. The GET-based OData function is named in a way that violates expected behavior, making it susceptible to CSRF attacks. This allows an attacker to craft malicious requests that are executed in the context of an authenticated user.

To exploit this, an attacker must trick an authenticated user into clicking a crafted link or visiting a malicious page. The attacker does not require authentication but relies on the victim's active session. The GET-based nature of the vulnerable function simplifies exploitation, as CSRF often requires only a single request.

Successful exploitation can lead to unauthorized actions being performed on behalf of the victim, potentially compromising the confidentiality and integrity of the application. Availability is not affected.

SAP has released security patches as part of its regular Security Patch Day. Customers are advised to apply the relevant SAP Security Notes to mitigate this vulnerability [1].