CVE-2018-2420

CVE-2018-2420 affects SAP Internet Graphics Server (IGS) across versions 7.20, 7.20EXT, 7.45, 7.49, 7.53. Root cause: improper validation of file formats during upload allows an attacker to upload arbitrary files (including script files). Impact: potential confidentiality, integrity, and availabi...