cve/2024/CVE-2024-34692.md

### [CVE-2024-34692](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-34692)
![](https://img.shields.io/static/v1?label=Product&message=SAP%20Enable%20Now&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=ENABLE_NOW_CONSUMP_DEL%201704%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=WPB_MANAGER_CE%2010%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Version&message=WPB_MANAGER_HANA%2010%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-434%3A%20Unrestricted%20Upload%20of%20File%20with%20Dangerous%20Type&color=brightgreen)

### Description

Due to missing verification of file type orcontent, SAP Enable Now allows an authenticated attacker to upload arbitraryfiles. These files include executables which might be downloaded and executedby the user which could host malware. On successful exploitation an attackercan cause limited impact on confidentiality and Integrity of the application.

### POC

#### Reference
No PoCs from references.

#### Github
- https://github.com/fkie-cad/nvd-json-data-feeds