CVE-2020-28337 EXPLOIT
7.2
HIGH · CVSS 3.1 · EPSS 16.6% (pctl 97)
Patch early
A public exploit exists.
Description
A directory traversal issue in the Utils/Unzip module in Microweber through 1.1.20 allows an authenticated attacker to gain remote code execution via the backup restore feature. To exploit the vulnerability, an attacker must have the credentials of an administrative user, upload a maliciously constructed ZIP file with file paths including relative paths (i.e., ../../), move this file into the backup directory, and execute a restore on this file.
Scoring
| CVSS | 7.2 (HIGH, v3.1) |
|---|---|
| Vector | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H |
| EPSS | 16.61% — more likely to be exploited than 97% of all CVEs |
| Weakness | CWE-22 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2021-02-15 |
| Last modified | 2026-06-17 |
Affected (1)
| Vendor | Product |
|---|---|
| microweber | microweber |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Microweber CMS 1.1.20 - Remote Code Execution (Authenticated) | 2021-05-10 |
References
- http://packetstormsecurity.com/files/162514/Microweber-CMS-1.1.20-Remote-Code-Execution.html
- https://github.com/microweber/microweber/commit/777ee9c3e7519eb3672c79ac41066175b2001b50
- https://sl1nki.page/advisories/CVE-2020-28337
- https://sl1nki.page/blog/2021/02/01/microweber-zip-slip
- http://packetstormsecurity.com/files/162514/Microweber-CMS-1.1.20-Remote-Code-Execution.html
- https://github.com/microweber/microweber/commit/777ee9c3e7519eb3672c79ac41066175b2001b50
- https://sl1nki.page/advisories/CVE-2020-28337
- https://sl1nki.page/blog/2021/02/01/microweber-zip-slip
→ the Explorer · watch your stack · NVD