Directory traversal when creating conditions (batch input), SAP security note 1620983 RedRays Team December 13, 2011
