CVE-2020-37082

CVE-2020-37082 describes an unauthenticated file access vulnerability in webERP version 4.15.1, allowing remote attackers to download sensitive database backup files. With a CVSS score of 7.5 (High), this flaw permits unauthenticated attackers to directly access backup files, leading to a complete compromise of confidentiality without requiring user interaction or complex attack methods. Despite its high severity and potential for data theft, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this vulnerability.