Loading HuntDB...

GHSA-fwfm-f7pg-rq6r

GitHub Security Advisory

⚠ Unreviewed LOW Has CVE

Advisory Details

SAP Master Data Governance File Upload application allows an attacker to exploit insufficient validation of path information provided by users, thus characters representing ‘traverse to parent directory’ are passed through to the file APIs. As a result, it has a low impact to the confidentiality.

Related CVEs

Key Information

GHSA ID
GHSA-fwfm-f7pg-rq6r
Published
December 12, 2023 3:31 AM
Last Modified
December 14, 2023 9:31 PM
CVSS Score
2.5 /10
Primary Ecosystem
Unknown
Primary Package
Unknown
GitHub Reviewed
✗ No

Dataset

Last updated: June 18, 2025 6:25 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.