Description (CNA)
i-doit Open Source CMDB 1.14.1 contains a file deletion vulnerability in the import module that allows authenticated attackers to delete arbitrary files by manipulating the delete_import parameter. Attackers can send a POST request to the import module with a crafted filename to remove files from the server's filesystem.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| i-doit GmbH / i-doit Open Source CMDB | affected 1.14.1 |
CWE
CWE-73
References
- https://www.exploit-db.com/exploits/48427
- https://www.i-doit.org/
- https://sourceforge.net/projects/i-doit/
- https://www.vulncheck.com/advisories/i-doit-open-source-cmdb-arbitrary-file-deletion
ADP enrichment
No English description supplied.
No references supplied.