Medium · 6.5 CVE-2018-2420 EUVD-2018-14275GHSA-ghqr-5fq8-7vx6

SAP Internet Graphics Server (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53, allows an attacker to upload any file (including script files) without…

Published May 9, 2018 · Updated Aug 5, 2024 · Assigned by sap

Vendor: SAP Product: SAP Internet Graphics Server (IGS)

Description

SAP Internet Graphics Server (IGS), 7.20, 7.20EXT, 7.45, 7.49, 7.53, allows an attacker to upload any file (including script files) without proper file format validation.

Affected products

Vendor	Product	Affected	Fixed
SAP SE	SAP Internet Graphics Server (IGS)	7.20, 7.20EXT, 7.45, 7.49, 7.53	—

References

https://launchpad.support.sap.com/#/notes/2615635
https://blogs.sap.com/2018/05/08/sap-security-patch-day-may-2018/
104108 vdb-entry