Description (CNA)
SAP Master Data Governance File Upload application allows an attacker to exploit insufficient validation of path information provided by users, thus characters representing ‘traverse to parent directory’ are passed through to the file APIs. As a result, it has a low impact to the confidentiality.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SAP_SE / SAP Master Data Governance | affected MDG_FND 731; affected MDG_FND 732; affected MDG_FND 746; affected MDG_FND 747; affected MDG_FND 748; affected MDG_FND 749; affected MDG_FND 752; affected MDG_FND 800; affected MDG_FND 802; affected MDG_FND 803; affected MDG_FND 804; affected MDG_FND 805; affected MDG_FND 806; affected MDG_FND 807; affected MDG_FND 808; affected SAP_BS_FND 702 |
CWE
CWE-22
References
- https://me.sap.com/notes/3363690
- https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
ADP enrichment
No English description supplied.