What’s Vulnerable › Vulnerabilities

CVE-2020-37078: i-doit Open Source CMDB 1.14.1 - Arbitrary File Deletion

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-02-03 · updated 2026-06-17
• Weakness: CWE-73

Description

i-doit Open Source CMDB 1.14.1 contains a file deletion vulnerability in the import module that allows authenticated attackers to delete arbitrary files by manipulating the delete_import parameter. Attackers can send a POST request to the import module with a crafted filename to remove files from the server's filesystem.

Affected products

• i-doit GmbH i-doit Open Source CMDB: 1.14.1

References

• https://sourceforge.net/projects/i-doit/
• https://www.exploit-db.com/exploits/48427
• https://www.i-doit.org/
• https://www.vulncheck.com/advisories/i-doit-open-source-cmdb-arbitrary-file-deletion

Get alerted when CVE-2020-37078 or the next vulnerability affects your stack