GHSA-4p7q-px7w-p3p9
GitHub Security Advisory
⚠ Unreviewed
HIGH
Has CVE
Advisory Details
SAP Cloud Connector, version - 2.0, allows the upload of zip files as backup. This backup file can be tricked to inject special elements such as '..' and '/' separators, for attackers to escape outside of the restricted location to access files or directories.
Related CVEs
Key Information
7.5
/10
Dataset
Last updated: June 25, 2025 8:46 PM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.