GHSA-fq48-p44p-fxj5
GitHub Security Advisory
⚠ Unreviewed
MODERATE
Has CVE
Advisory Details
The Integration Builder Framework of SAP Process Integration versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not check the file type extension of the file uploaded from local source. An attacker could craft a malicious file and upload it to the application, which could lead to denial of service and impact the availability of the application.
Related CVEs
Key Information
5.0
/10
Dataset
Last updated: June 26, 2025 6:25 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.