CVEvulnerability
CVE-2020-28337
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2021-02-15
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.2 HIGH — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
- Weaknesses
- CWE-22
Description
A directory traversal issue in the Utils/Unzip module in Microweber through 1.1.20 allows an authenticated attacker to gain remote code execution via the backup restore feature. To exploit the vulnerability, an attacker must have the credentials of an administrative user, upload a maliciously constructed ZIP file with file paths including relative paths (i.e., ../../), move this file into the backup directory, and execute a restore on this file.
Affected configurations
• microweber microweber (<= 1.1.20)
Related
Weakness · CWE (1)
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness
References
- http://packetstormsecurity.com/files/162514/Microweber-CMS-1.1.20-Remote-Code-Execution.html Exploit, Third Party Advisory, VDB Entry
- https://github.com/microweber/microweber/commit/777ee9c3e7519eb3672c79ac41066175b2001b50 Patch, Third Party Advisory
- https://sl1nki.page/advisories/CVE-2020-28337 Third Party Advisory
- https://sl1nki.page/blog/2021/02/01/microweber-zip-slip Exploit, Patch, Third Party Advisory
- http://packetstormsecurity.com/files/162514/Microweber-CMS-1.1.20-Remote-Code-Execution.html Exploit, Third Party Advisory, VDB Entry
- https://github.com/microweber/microweber/commit/777ee9c3e7519eb3672c79ac41066175b2001b50 Patch, Third Party Advisory
- https://sl1nki.page/advisories/CVE-2020-28337 Third Party Advisory
- https://sl1nki.page/blog/2021/02/01/microweber-zip-slip Exploit, Patch, Third Party Advisory