CVE-2021-33685

SAP Business One version - 10.0 allows low-level authorized attacker to traverse the file system to access files or directories that are outside of the restricted directory. A successful attack allows access to high level sensitive data...

CVE-2021-33685

SAP Business One 10.0 has a path traversal vulnerability (CVE-2021-33685) that lets a low-privileged, authorized attacker access files/directories outside the restricted path, potentially exposing high-sensitivity data. The issue affects the product as described in multiple references, including ...