CVE-2020-26828

CVE-2020-26828 affects SAP Disclosure Management 10.1. Authorized users can upload/download certain file types; some formats allow formulas that call external applications or run scripts, enabling payloads to potentially steal or modify spreadsheet data. The connected documents provide the vulner...