File Path Manipulation Vulnerability in SAP Disclosure Management 10.x

CVE-2018-2487

Summary

SAP Disclosure Management 10.x is susceptible to a file path manipulation vulnerability. An attacker can exploit this by crafting a malicious zip file that, when extracted, may place files in unintended locations. This behavior can lead to data exposure and unauthorized access, compromising the security of the system. Users are advised to exercise caution when handling zip files and ensure proper validation mechanisms are in place to mitigate related risks.

References