CVE-2020-27304 describes a critical directory traversal vulnerability in the CivetWeb web library, affecting various products including civetweb_project civetweb and Siemens Sinec Infrastructure Network Services. This flaw allows unauthenticated attackers to upload files to arbitrary locations on non-Windows operating systems by manipulating filepaths during form-based uploads, leveraging the mg_handle_form_request API. With a CVSS score of 9.8 (Critical), successful exploitation can lead to complete compromise of confidentiality, integrity, and availability. While no active exploitation, public exploit code, or significant community discussion has been observed, its high severity warrants immediate attention.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 1.8, < 1.15CPE matchmatch criteria | cpe:2.3:a:civetweb_project:civetweb:*:*:*:*:*:*:*:* | ||
< 1.0.1.1CPE matchmatch criteria | cpe:2.3:a:siemens:sinec_infrastructure_network_services:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
CVE-2020-27304
Jun 11, 2024civetweb: directory traversal when using the built-in example HTTP form-based file upload mechanism via the mg_handle_form_request API
Oct 18, 2021The CivetWeb web library does not validate uploaded filepaths when running on an OS other than Windows when using the built-in HTTP form-based file upload mechanism via the mg_handle_form_request API. Web applications that use the file upload form handler and use parts of the user-controlled filename in the output path are susceptible to directory traversal
Oct 12, 2021