SAP Disclosure Management 10.x allows an attacker to exploit through a specially crafted zip file provided by users: When extracted in specific use cases, files within this zip file can land in different locations than the originally intended extraction point.

Related CVEs

CVE-2018-2487

Key Information

GHSA ID

GHSA-p3hh-wp2w-w6v6

Published

May 13, 2022 1:20 AM

Last Modified

May 13, 2022 1:20 AM

CVSS Score

7.5 /10

Primary Ecosystem

Unknown

Primary Package

Unknown

GitHub Reviewed

✗ No

Dataset

Last updated: June 18, 2025 6:25 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.