Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
i-doit Open Source CMDB 1.14.1 contains a file deletion vulnerability in the import module that allows authenticated attackers to delete arbitrary files by manipulating the delete_import parameter. Attackers can send a POST request to the import module with a crafted filename to remove files from the server's filesystem.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2020-37078 i-doit Open Source CMDB 1.14.1 contains a file deletion vulnerability in the import module that allows authenticated attackers to delete arbitrary files by manipulati… https://www.cve.org/CVERecord?id=CVE-2020-37078
Post summary
The text announces CVE-2020-37078, a file deletion flaw in i‑doit Open Source CMDB 1.14.1 that allows authenticated users to delete arbitrary files via the import module.
[CVE-2020-37078: HIGH] i-doit Open Source CMDB 1.14.1 has a file deletion vulnerability in the import module, letting authenticated attackers delete files via the delete_import parameter manipulation.#cve,CVE-2020-37078,#cybersecurity https://cvefind.com/CVE-2020-37078
Post summary
The post announces a high‑severity file deletion flaw in i‑doit Open Source CMDB 1.14.1’s import module, where authenticated users can delete files by manipulating the delete_import parameter.