SAP Cloud Connector, version - 2.0, allows the upload of zip files as backup. This backup file can be tricked to inject special elements such as '..' and '/' separators, for attackers to escape outside of the restricted location to access files or directories.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: sap

Published: 2021-09-15T18:01:43

Updated: 2024-08-03T23:58:22.617Z

Reserved: 2021-05-28T00:00:00

Link: CVE-2021-33692

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2021-09-15T19:15:09.237

Modified: 2024-11-21T06:09:22.837

Link: CVE-2021-33692

cve-icon Redhat

No data.