CVE-2018-2404

SAP Disclosure Management 10.1 allows an attacker to upload any file without proper file format validation.

Date published : 2018-04-10

http://www.securityfocus.com/bid/103727

https://blogs.sap.com/2018/04/10/sap-security-patch-day-april-2018/