Directory Traversal Vulnerability in SAP Cloud Connector

CVE-2021-33692

Summary

The SAP Cloud Connector version 2.0 contains a directory traversal vulnerability that permits malicious users to upload specially crafted zip files. By employing tricks with path separators such as '..' and '/', attackers can escape the intended file upload directory, leading to unauthorized access to sensitive files or directories on the server. This exploit can severely compromise the security of the system and must be addressed promptly.

References