CVE-2021-44232

SAF-T Framework Transaction SAFTN_G allows an attacker to exploit insufficient validation of path information provided by normal user, leading to full server directory access. The attacker can see the whole filesystem structure but cannot overwrite, delete, or corrupt arbitrary files on the server.

• CWE-22

• https://launchpad.support.sap.com/#/notes/3124094Vendor Advisory
• https://wiki.scn.sap.com/wiki/display/PSR/SAP+Security+Patch+Day+-+December+2021Permissions Required, Vendor Advisory
• https://launchpad.support.sap.com/#/notes/3124094Vendor Advisory
• https://wiki.scn.sap.com/wiki/display/PSR/SAP+Security+Patch+Day+-+December+2021Permissions Required, Vendor Advisory

Published

Dec 14, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-44226Razer Synapse before 3.7.0228.022817 allows privilege escala…7.3
• CVE-2021-44227In GNU Mailman before 2.1.38, a list member or moderator can…8.8
• CVE-2021-44228Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security r…10
• CVE-2021-4423The RAYS Grid plugin for WordPress is vulnerable to Cross-Si…4.3
• CVE-2021-44230PortSwigger Burp Suite Enterprise Edition before 2021.11 on …6.5
• CVE-2021-44231Internally used text extraction reports allow an attacker to…9.8
• CVE-2021-44233SAP GRC Access Control - versions V1100_700, V1100_731, V120…8.8
• CVE-2021-44234SAP Business One - version 10.0, extended log stores informa…5.5
• CVE-2021-44235Two methods of a utility class in SAP NetWeaver AS ABAP - ve…6.7
• CVE-2021-44238AyaCMS 3.1.2 is vulnerable to Remote Code Execution (RCE) vi…7.2
• CVE-2021-4424The Slider Hero plugin for WordPress is vulnerable to Cross-…4.3
• CVE-2021-44244An SQL Injection vulnerabiity exists in Sourcecodester Logis…9.8