CVE-2021-33685

SAP Business One version – 10.0 allows low-level authorized attacker to traverse the file system to access files or directories that are outside of the restricted directory. A successful attack allows access to high level sensitive data

Date published : 2021-09-14

https://launchpad.support.sap.com/#/notes/3069032

https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=585106405