Description
SAPCAR improperly sanitizes the file paths while extracting SAPCAR archives. Due to this, an attacker could craft a malicious SAPCAR archive containing directory traversal sequences. When a high privileged victim extracts this malicious archive, it is then processed by SAPCAR on their system, causing files to be extracted outside the intended directory and overwriting files in arbitrary locations. This vulnerability has a high impact on the integrity and availability of the application with no impact on confidentiality.
INFO
Published Date :
2025-07-08T00:36:53.225Z
Last Modified :
2025-07-08T16:13:23.978Z
Source :
sap
AFFECTED PRODUCTS
The following products are affected by CVE-2025-42970 vulnerability.
No data.
REFERENCES
Here, you will find a curated list of external links that provide in-depth information to CVE-2025-42970.
