Path traversal

SAP NetWeaver Knowledge Management, versions KMC-CM - 7.00, 7.01, 7.02, 7.30, 7.31, 7.40, 7.50 and KMC-WPC 7.30, 7.31, 7.40, 7.50, does not sufficiently validate path information provided by users, thus characters representing traverse to parent directory are passed through to the file APIs,...

CVE-2020-6225

SAP NetWeaver Knowledge Management vulnerability CVE-2020-6225 involves path traversal due to insufficient validation of user-supplied path information. Affected are SAP NetWeaver Knowledge Management components (KMC-CM: 7.00, 7.01, 7.02, 7.30, 7.31, 7.40, 7.50; KMC-WPC: 7.30, 7.31, 7.40, 7.50). ...