CVE-2018-2404

https://notcve.org/view.php?id=CVE-2018-2404

SAP Disclosure Management 10.1 allows an attacker to upload any file without proper file format validation. SAP Disclosure Management 10.1 permite que un atacante suba cualquier archivo sin validación de formato de archivo. • http://www.securityfocus.com/bid/103727 https://blogs.sap.com/2018/04/10/sap-security-patch-day-april-2018 https://launchpad.support.sap.com/#/notes/2607052 • CWE-434: Unrestricted Upload of File with Dangerous Type •