Unrated severityCISA KEVNVD Advisory· Published Mar 1, 2018· Updated Oct 21, 2025
CVE-2018-2380
CVE-2018-2380
Description
SAP CRM, 7.01, 7.02,7.30, 7.31, 7.33, 7.54, allows an attacker to exploit insufficient validation of path information provided by users, thus characters representing "traverse to parent directory" are passed through to the file APIs.
Affected products
1- SAP SE/SAP CRMv5Range: 7.01
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4- www.exploit-db.com/exploits/44292/mitreexploitx_refsource_EXPLOIT-DB
- www.securityfocus.com/bid/103001mitrevdb-entryx_refsource_BID
- blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018/mitrex_refsource_CONFIRM
- launchpad.support.sap.commitrex_refsource_CONFIRM
News mentions
0No linked articles in our index yet.